Описание
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.9.4+dfsg1-6.1ubuntu1.8 |
| devel | not-affected | 2.9.14+dfsg-1.1 |
| esm-infra-legacy/trusty | not-affected | 2.9.1+dfsg1-3ubuntu4.13+esm4 |
| esm-infra/bionic | not-affected | 2.9.4+dfsg1-6.1ubuntu1.8 |
| esm-infra/focal | not-affected | 2.9.10+dfsg-5ubuntu0.20.04.5 |
| esm-infra/xenial | released | 2.9.3+dfsg1-1ubuntu0.7+esm4 |
| focal | released | 2.9.10+dfsg-5ubuntu0.20.04.5 |
| jammy | released | 2.9.13+dfsg-1ubuntu0.2 |
| kinetic | released | 2.9.14+dfsg-1ubuntu0.1 |
| lunar | not-affected | 2.9.14+dfsg-1.1 |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
An issue was discovered in libxml2 before 2.10.3. When parsing a multi ...
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
EPSS
7.5 High
CVSS3