PT-2009-1016 · Xmlsoft+2 · Libxml+3

Jan Lieskovsky · Published 2009-08-10 · Updated 2025-01-21 · CVE-2009-2416

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.5.10 through 2.6.32 libxml version 1.8.17

Description The issue allows context-dependent attackers to cause a denial of service, resulting in an application crash, via crafted Notation or Enumeration attribute types in an XML file. This can be exploited remotely. The vulnerability is related to use-after-free errors and buffer data boundary issues.

Recommendations For libxml2 versions 2.5.10 through 2.6.32, update to a version newer than 2.7.3-r2 to resolve the issue. For libxml version 1.8.17, consider disabling the use of Notation or Enumeration attribute types in XML files until a patch is available. Restrict access to XML files to minimize the risk of exploitation.

Exploit

Fix

DoS

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

BDU:2015-02612

BDU:2015-02613

BDU:2015-09406

CVE-2009-2416

DSA-1859-1

DSA-1861-1

RHSA-2009:1206

RHSA-2009_1206

Affected Products

Red Hat

Vmware Vcenter

Libxml

Libxml2

References · 54

• 🔥 http://mail-archive.com/[e-mail]/msg678527.html · Exploit
• https://bdu.fstec.ru/vul/2015-09406 · Security Note
• https://bdu.fstec.ru/vul/2015-02613 · Security Note
• https://git.gnome.org/browse/libxml2/commit/?id=489f9671e71cc44a97b23111b3126ac8a1e21a59 · Patch
• https://osv.dev/vulnerability/CVE-2009-2416 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2416 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-2416 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-August/msg00547.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=515205 · Patch
• https://redhat.com/archives/fedora-package-announce/2009-August/msg00537.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2414 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2009-2416 · Vendor Advisory