A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
Se detectó una falla en la función xmlBuildQName de libxml2. Los desbordamientos de enteros en los cálculos del tamaño del búfer pueden provocar un desbordamiento del búfer en la pila. Este problema puede provocar corrupción de memoria o una denegación de servicio al procesar entradas manipuladas.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-787
|
| [email protected] | Secondary |
en
CWE-787
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| xmlsoft | libxml2 | * | <built-in method update of dict object at 0x7fd3855eac40> | Application |
| redhat | jboss_core_services | - | <built-in method update of dict object at 0x7fd3695db900> | Application |
| redhat | openshift_container_platform | 4.12 | <built-in method update of dict object at 0x7fd3695d96c0> | Application |
| redhat | openshift_container_platform | 4.13 | <built-in method update of dict object at 0x7fd36b1dc840> | Application |
| redhat | openshift_container_platform | 4.14 | <built-in method update of dict object at 0x7fd3855e90c0> | Application |
| redhat | openshift_container_platform | 4.15 | <built-in method update of dict object at 0x7fd3855e9900> | Application |
| redhat | openshift_container_platform | 4.16 | <built-in method update of dict object at 0x7fd2dbc0f040> | Application |
| redhat | openshift_container_platform | 4.17 | <built-in method update of dict object at 0x7fd3695d91c0> | Application |
| redhat | openshift_container_platform | 4.18 | <built-in method update of dict object at 0x7fd3695da6c0> | Application |
| redhat | openshift_container_platform_for_arm64 | 4.13 | <built-in method update of dict object at 0x7fd3855eb700> | Application |
| redhat | openshift_container_platform_for_arm64 | 4.14 | <built-in method update of dict object at 0x7fd36b1dc0c0> | Application |
| redhat | openshift_container_platform_for_arm64 | 4.15 | <built-in method update of dict object at 0x7fd36a6e7f80> | Application |
| redhat | openshift_container_platform_for_arm64 | 4.16 | <built-in method update of dict object at 0x7fd340acb280> | Application |
| redhat | openshift_container_platform_for_arm64 | 4.17 | <built-in method update of dict object at 0x7fd36b1de080> | Application |
| redhat | openshift_container_platform_for_arm64 | 4.18 | <built-in method update of dict object at 0x7fd3199406c0> | Application |
| redhat | openshift_container_platform_for_ibm_z | 4.13 | <built-in method update of dict object at 0x7fd3695db180> | Application |
| redhat | openshift_container_platform_for_ibm_z | 4.14 | <built-in method update of dict object at 0x7fd36b1dff80> | Application |
| redhat | openshift_container_platform_for_ibm_z | 4.15 | <built-in method update of dict object at 0x7fd36b17ac80> | Application |
| redhat | openshift_container_platform_for_ibm_z | 4.16 | <built-in method update of dict object at 0x7fd2a27936c0> | Application |
| redhat | openshift_container_platform_for_ibm_z | 4.17 | <built-in method update of dict object at 0x7fd36b1dfdc0> | Application |
| redhat | openshift_container_platform_for_ibm_z | 4.18 | <built-in method update of dict object at 0x7fd385664800> | Application |
| redhat | openshift_container_platform_for_linuxone | 4.13 | <built-in method update of dict object at 0x7fd38463be00> | Application |
| redhat | openshift_container_platform_for_linuxone | 4.14 | <built-in method update of dict object at 0x7fd38477c0c0> | Application |
| redhat | openshift_container_platform_for_linuxone | 4.15 | <built-in method update of dict object at 0x7fd2a2792e40> | Application |
| redhat | openshift_container_platform_for_linuxone | 4.16 | <built-in method update of dict object at 0x7fd340cc7e80> | Application |
| redhat | openshift_container_platform_for_linuxone | 4.17 | <built-in method update of dict object at 0x7fd385664300> | Application |
| redhat | openshift_container_platform_for_linuxone | 4.18 | <built-in method update of dict object at 0x7fd3688dd580> | Application |
| redhat | openshift_container_platform_for_power | 4.13 | <built-in method update of dict object at 0x7fd340af45c0> | Application |
| redhat | openshift_container_platform_for_power | 4.14 | <built-in method update of dict object at 0x7fd36b5e11c0> | Application |
| redhat | openshift_container_platform_for_power | 4.15 | <built-in method update of dict object at 0x7fd340af6500> | Application |
| redhat | openshift_container_platform_for_power | 4.16 | <built-in method update of dict object at 0x7fd2dbe5aa40> | Application |
| redhat | openshift_container_platform_for_power | 4.17 | <built-in method update of dict object at 0x7fd340af6d40> | Application |
| redhat | openshift_container_platform_for_power | 4.18 | <built-in method update of dict object at 0x7fd340af7500> | Application |
| redhat | enterprise_linux | 8.0 | <built-in method update of dict object at 0x7fd5116cc940> | Operating System |
| redhat | enterprise_linux | 9.0 | <built-in method update of dict object at 0x7fd385665380> | Operating System |
| redhat | enterprise_linux | 10.0 | <built-in method update of dict object at 0x7fd340af6040> | Operating System |
| redhat | enterprise_linux_eus | 8.4 | <built-in method update of dict object at 0x7fd38547d3c0> | Operating System |
| redhat | enterprise_linux_eus | 8.6 | <built-in method update of dict object at 0x7fd37019c1c0> | Operating System |
| redhat | enterprise_linux_eus | 8.8 | <built-in method update of dict object at 0x7fd36b1dcb40> | Operating System |
| redhat | enterprise_linux_eus | 9.4 | <built-in method update of dict object at 0x7fd3606ceac0> | Operating System |
| redhat | enterprise_linux_eus | 9.6 | <built-in method update of dict object at 0x7fd36b3fbd80> | Operating System |
| redhat | enterprise_linux_eus | 10.0 | <built-in method update of dict object at 0x7fd3105fb680> | Operating System |
| redhat | enterprise_linux_for_arm_64 | 8.0_aarch64 | <built-in method update of dict object at 0x7fd385664680> | Operating System |
| redhat | enterprise_linux_for_arm_64 | 9.0_aarch64 | <built-in method update of dict object at 0x7fd385667e80> | Operating System |
| redhat | enterprise_linux_for_arm_64 | 9.4_aarch64 | <built-in method update of dict object at 0x7fd385664880> | Operating System |
| redhat | enterprise_linux_for_arm_64 | 10.0_aarch64 | <built-in method update of dict object at 0x7fd385665c00> | Operating System |
| redhat | enterprise_linux_for_arm_64_eus | 9.4_aarch64 | <built-in method update of dict object at 0x7fd36b179300> | Operating System |
| redhat | enterprise_linux_for_arm_64_eus | 9.6_aarch64 | <built-in method update of dict object at 0x7fd39c5ed2c0> | Operating System |
| redhat | enterprise_linux_for_arm_64_eus | 10.0_aarch64 | <built-in method update of dict object at 0x7fd385664480> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems | 8.0_s390x | <built-in method update of dict object at 0x7fd30899ecc0> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems | 9.4_s390x | <built-in method update of dict object at 0x7fd36b178640> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems | 10.0_s390x | <built-in method update of dict object at 0x7fd36b138c00> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 9.0_s390x | <built-in method update of dict object at 0x7fd3106d7f00> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 9.4_s390x | <built-in method update of dict object at 0x7fd340cf30c0> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 9.6_s390x | <built-in method update of dict object at 0x7fd370224d00> | Operating System |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 10.0_s390x | <built-in method update of dict object at 0x7fd368da96c0> | Operating System |
| redhat | enterprise_linux_for_power_little_endian | 8.0_ppc64le | <built-in method update of dict object at 0x7fd2a159eb80> | Operating System |
| redhat | enterprise_linux_for_power_little_endian | 9.0_ppc64le | <built-in method update of dict object at 0x7fd3703f5c00> | Operating System |
| redhat | enterprise_linux_for_power_little_endian | 10.0_ppc64le | <built-in method update of dict object at 0x7fd3856642c0> | Operating System |
| redhat | enterprise_linux_for_power_little_endian_eus | 9.4_ppc64le | <built-in method update of dict object at 0x7fd369a0fd40> | Operating System |
| redhat | enterprise_linux_for_power_little_endian_eus | 9.6_ppc64le | <built-in method update of dict object at 0x7fd340beadc0> | Operating System |
| redhat | enterprise_linux_for_power_little_endian_eus | 10.0_ppc64le | <built-in method update of dict object at 0x7fd36b3e49c0> | Operating System |
| redhat | enterprise_linux_server | 7.0 | <built-in method update of dict object at 0x7fd36b1dc980> | Operating System |
| redhat | enterprise_linux_server_aus | 8.2 | <built-in method update of dict object at 0x7fd384634740> | Operating System |
| redhat | enterprise_linux_server_aus | 8.4 | <built-in method update of dict object at 0x7fd30899c8c0> | Operating System |
| redhat | enterprise_linux_server_aus | 8.6 | <built-in method update of dict object at 0x7fd38477f780> | Operating System |
| redhat | enterprise_linux_server_aus | 9.2 | <built-in method update of dict object at 0x7fd3856647c0> | Operating System |
| redhat | enterprise_linux_server_aus | 9.4 | <built-in method update of dict object at 0x7fd38547cb40> | Operating System |
| redhat | enterprise_linux_server_aus | 9.6 | <built-in method update of dict object at 0x7fd385664c40> | Operating System |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | 9.4_ppc64le | <built-in method update of dict object at 0x7fd38547e140> | Operating System |
| redhat | enterprise_linux_server_tus | 8.8 | <built-in method update of dict object at 0x7fd38547fac0> | Operating System |
| redhat | in-vehicle_operating_system | 1.0 | <built-in method update of dict object at 0x7fd38547f580> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform:4.13:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform:4.14:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform:4.15:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform:4.16:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform:4.17:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform:4.18:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.13:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.14:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.15:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.16:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.17:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.18:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.13:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.14:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.15:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.16:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.17:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.18:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.13:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.14:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.15:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.16:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.17:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.18:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_power:4.13:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_power:4.14:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_power:4.15:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_power:4.16:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_power:4.17:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform_for_power:4.18:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.4_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64:10.0_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:10.0_aarch64:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.0_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:10.0_s390x:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:10.0_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:in-vehicle_operating_system:1.0:*:*:*:*:*:*:* |