Описание
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.9.4+dfsg1-6.1ubuntu1.8 |
| devel | not-affected | 2.9.14+dfsg-1.1 |
| esm-infra-legacy/trusty | not-affected | 2.9.1+dfsg1-3ubuntu4.13+esm4 |
| esm-infra/bionic | not-affected | 2.9.4+dfsg1-6.1ubuntu1.8 |
| esm-infra/focal | not-affected | 2.9.10+dfsg-5ubuntu0.20.04.5 |
| esm-infra/xenial | released | 2.9.3+dfsg1-1ubuntu0.7+esm4 |
| focal | released | 2.9.10+dfsg-5ubuntu0.20.04.5 |
| jammy | released | 2.9.13+dfsg-1ubuntu0.2 |
| kinetic | released | 2.9.14+dfsg-1ubuntu0.1 |
| lunar | not-affected | 2.9.14+dfsg-1.1 |
Показывать по
EPSS
7.8 High
CVSS3
Связанные уязвимости
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML ...
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
Уязвимость функции очистки объекта XML библиотеки анализа XML-документов libxml2, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.8 High
CVSS3