PT-2018-2476 · Xmlsoft+4 · Libxml2+4

Dongliang Mu · Published 2018-04-03 · Updated 2024-06-15 · CVE-2018-9251

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions libxml2 version 2.9.8

Description The issue is related to the xz decomp function in libxml2, which can be exploited by remote attackers to cause a denial of service (infinite loop) via a crafted XML file, triggering LZMA MEMLIMIT ERROR. This can be demonstrated using xmllint.

Recommendations For libxml2 version 2.9.8, consider disabling the xz decomp function as a temporary workaround until a patch is available. Restrict access to crafted XML files to minimize the risk of exploitation.

Exploit

Fix

DoS

Infinite Loop

Resource Exhaustion

Weakness Enumeration

CWE-835

CWE-400

Related Identifiers

ALT-PU-2019-1924

ALT-PU-2019-3079

BDU:2019-00734

CESA-2020_1827

CVE-2018-9251

DLA-1524-1

MGASA-2019-0047

OPENSUSE-SU-2018_3107-1

OPENSUSE-SU-2018_3110-1

OPENSUSE-SU-2024:11016-1

RHSA-2020:1827

RHSA-2020_1827

SUSE-SU-2018:3080-1

SUSE-SU-2018:3081-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Libxml2

References · 93

• 🔥 https://bugzilla.gnome.org/show_bug.cgi?id=794914 · Exploit
• https://bdu.fstec.ru/vul/2019-04730 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:3080-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9048 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14567 · Security Note
• https://errata.altlinux.org/ALT-PU-2019-3079 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5969 · Security Note
• https://linux.oracle.com/errata/ELSA-2020-1827.html · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1524-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4658 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/681760 · Security Note
• https://security-tracker.debian.org/tracker/DLA-1524-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:3081-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7376 · Security Note
• https://bdu.fstec.ru/vul/2020-04513 · Security Note