Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-49795

Опубликовано: 11 июн. 2025
Источник: redhat
CVSS3: 7.5

Описание

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10libxml2Affected
Red Hat Enterprise Linux 6libxml2Out of support scope
Red Hat Enterprise Linux 7libxml2Affected
Red Hat Enterprise Linux 8libxml2Affected
Red Hat Enterprise Linux 9libxml2Affected
Red Hat JBoss Core Serviceslibxml2Affected

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-825
https://bugzilla.redhat.com/show_bug.cgi?id=2372379libxml: Null pointer dereference leads to Denial of service (DoS)

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
3 дня назад

[Unknown description]

CVSS3: 7.5
nvd
2 дня назад

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.

CVSS3: 7.5
debian
2 дня назад

A NULL pointer dereference vulnerability was found in libxml2 when pro ...

CVSS3: 7.5
github
2 дня назад

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.

7.5 High

CVSS3