Asymmetric denial of service In libxml2
Description
libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.6 | 2.9.4-r4 | ||
alpine v3.19 | 2.9.4-r4 | ||
alpine v3.22 | 2.9.4-r4 | ||
alpine v3.7 | 2.9.4-r4 | ||
alpine v3.17 | 2.9.4-r4 | ||
alpine v3.16 | 2.9.4-r4 | ||
alpine v3.14 | 2.9.4-r4 | ||
alpine v3.11 | 2.9.4-r4 | ||
alpine v3.5 | 2.9.4-r3 | ||
 debian 13 | 2.9.4+dfsg1-5.1 |
1-10 of 29
10
Aliases
1. 2. 3. 4. 5. 6. 7.