Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.
严重 CVSS 9.8
摘要
Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
- :
- :
数据来源
- NVD DATABASE
原始链接
- http://www.securityfocus.com/bid/98877 Third Party Advisory
- http://www.securitytracker.com/id/1038623 Third Party Advisory
- https://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=1462216 Issue Tracking
- https://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e Patch
- https://source.android.com/security/bulletin/2017-06-01 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3952 Third Party Advisory
- http://www.securityfocus.com/bid/98877 Third Party Advisory
- http://www.securitytracker.com/id/1038623 Third Party Advisory
- https://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=1462216 Issue Tracking
- https://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e Patch
- https://source.android.com/security/bulletin/2017-06-01 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3952 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
时间线
- nvd_ingest NVD