Опубликовано: 02 мая 2024
Источник: github
Github: Прошло ревью
CVSS4: 9.2
CVSS3: 8.1
Описание
libxmljs2 vulnerable to type confusion when parsing specially crafted XML
libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode::get_local_namespaces()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.
Пакеты
Наименование
libxmljs2
npm
Затронутые версииВерсия исправления
<= 0.35.0
Отсутствует
Связанные уязвимости
CVSS3: 8.1
nvd
почти 2 года назад
libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode::get_local_namespaces()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.