PT-2025-7047 · Libxml2+12 · Libxml2+12
CVE-2025-24928
·
Publicado
2025-01-28
·
Atualizado
2026-05-08
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
libxml2 versions 2.12.10 and earlier, 2.13.x versions prior to 2.13.6
Description
The issue is a stack-based buffer overflow in the
xmlSnprintfElements function in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD.Recommendations
For libxml2 versions 2.12.10 and earlier, and 2.13.x versions prior to 2.13.6, update to version 2.12.10 or 2.13.6 or later to resolve the issue.
As a temporary workaround, consider disabling DTD validation for untrusted documents or DTDs until a patch is available.
Exploit
Correção
DoS
Stack Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Ibm Aix
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libxml2