PT-2018-2476 · Xmlsoft+4 · Libxml2+4

Dongliang Mu · Publicado 2018-04-03 · Atualizado 2024-06-15 · CVE-2018-9251

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions libxml2 version 2.9.8

Description The issue is related to the xz decomp function in libxml2, which can be exploited by remote attackers to cause a denial of service (infinite loop) via a crafted XML file, triggering LZMA MEMLIMIT ERROR. This can be demonstrated using xmllint.

Recommendations For libxml2 version 2.9.8, consider disabling the xz decomp function as a temporary workaround until a patch is available. Restrict access to crafted XML files to minimize the risk of exploitation.

Exploit

Correção

DoS

Infinite Loop

Resource Exhaustion

Enumeração de Fraquezas

CWE-835

CWE-400

Identificadores relacionados

ALT-PU-2019-1924

ALT-PU-2019-3079

BDU:2019-00734

CESA-2020_1827

CVE-2018-9251

DLA-1524-1

MGASA-2019-0047

OPENSUSE-SU-2018_3107-1

OPENSUSE-SU-2018_3110-1

OPENSUSE-SU-2024:11016-1

RHSA-2020:1827

RHSA-2020_1827

SUSE-SU-2018:3080-1

SUSE-SU-2018:3081-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Libxml2

Referências · 93

• 🔥 https://bugzilla.gnome.org/show_bug.cgi?id=794914 · Exploit
• https://suse.com/security/cve/CVE-2017-9049 · Nota
• https://suse.com/security/cve/CVE-2018-14404.html · Nota
• https://suse.com/security/cve/CVE-2017-5969 · Nota
• https://bugzilla.suse.com/1102046 · Nota
• https://bdu.fstec.ru/vul/2019-04730 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2018:3080-1 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9251 · Nota
• https://suse.com/security/cve/CVE-2021-3537 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14567 · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-3518 · Nota
• https://errata.altlinux.org/ALT-PU-2019-3079 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5969 · Nota de Segurança
• http://openwall.com/lists/oss-security/2017/05/15/1 · Nota