PT-2019-5584 · Libxml2+5 · Libxml2+5
Publicado
2019-08-07
·
Atualizado
2025-12-03
·
CVE-2019-19956
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libxml2 versions prior to 2.9.10
Description
The issue is related to a memory leak in the
xmlParseBalancedChunkMemoryRecover function in the parser.c file of the libxml2 library. This memory leak is associated with newDoc->oldNs. The vulnerability can be exploited by a remote attacker to cause a denial of service.Recommendations
For versions prior to 2.9.10, update to version 2.9.10 or later to resolve the memory leak issue.
As a temporary workaround, consider restricting the use of the
xmlParseBalancedChunkMemoryRecover function in parser.c until a patch is available.Correção
Missing Release of Resource after Effective Lifetime
Memory Leak
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Suse
Ubuntu
Libxml2