Lack of data validation In libxml-parser-perl
Description
XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack. In the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then the new value will be written at location (++stackptr), which equals stacksize and therefore falls just outside the allocated buffer. The bug can be observed when parsing an XML file with very deep element nesting
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 2.47-2 | ||
 rpm rhel7 | - | - | |
debian 12 | 2.46-4+deb12u1 | ||
debian 11 | 2.46-2+deb11u1 | ||
debian 13 | 2.47-2~deb13u1 | ||
rpm rhel10 | 0:2.47-6.1.el10_1 | ||
rpm rhel6 | - | - | |
rpm rhel8 | 0:2.44-12.el8_10 | ||
rpm rhel9 | 0:2.46-9.1.el9_7 | ||
rpm rhel9.6 | 0:2.46-9.el9_6.1 |
1-10 of 13
10
Aliases
1. 2. 3. 4. 5.