Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.
Critical CVSS 9.8
Summary
Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
- :
Sources
- NVD DATABASE
Original Links
- http://www.securityfocus.com/bid/98877 Third Party Advisory
- http://www.securitytracker.com/id/1038623 Third Party Advisory
- https://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=1462216 Issue Tracking
- https://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e Patch
- https://source.android.com/security/bulletin/2017-06-01 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3952 Third Party Advisory
- http://www.securityfocus.com/bid/98877 Third Party Advisory
- http://www.securitytracker.com/id/1038623 Third Party Advisory
- https://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=1462216 Issue Tracking
- https://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e Patch
- https://source.android.com/security/bulletin/2017-06-01 Third Party Advisory
- https://www.debian.org/security/2017/dsa-3952 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Timeline
- nvd_ingest NVD