Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7214
HistoryAug 01, 2018 - 7:17 a.m.

Out-of-Bounds Read

2018-08-0107:17:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

libxml2.so is vulnerable to out-of-bounds reads. A malicious user can pass XML data with unterminated encoding or incomplete XML declarations to the xmlParseXMLDecl function in parser.c to cause an out-of-bounds heap read.

References

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N