[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS2-2023-1996 --- libxml2

ID: oval:org.secpod.oval:def:1701240Date: (C)2023-03-28   (M)2023-12-07
Class: PATCHFamily: unix




An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault. An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked

Platform:
Amazon Linux 2
Product:
libxml2
Reference:
ALAS2-2023-1996
CVE-2022-40303
CVE-2022-40304
CVE    2
CVE-2022-40304
CVE-2022-40303
CPE    2
cpe:/a:libxml2:libxml2
cpe:/o:amazon:linux:2

© SecPod Technologies