Описание
The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2.9.2+zdfsg1-4ubuntu1 |
| esm-infra-legacy/trusty | released | 2.9.1+dfsg1-3ubuntu4.5 |
| precise | not-affected | xz support not present |
| trusty | released | 2.9.1+dfsg1-3ubuntu4.5 |
| trusty/esm | released | 2.9.1+dfsg1-3ubuntu4.5 |
| upstream | needs-triage | |
| vivid | not-affected | xz support disabled |
| vivid/stable-phone-overlay | not-affected | xz support disabled |
| vivid/ubuntu-core | DNE | |
| wily | not-affected | xz support disabled |
Показывать по
2.6 Low
CVSS2
Связанные уязвимости
The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly d ...
The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
Уязвимость функции xz_decomp библиотеки libxml2, позволяющая нарушителю вызвать отказ в обслуживании
2.6 Low
CVSS2