Your submission was sent successfully! Close

USN-3504-1: libxml2 vulnerability

5 December 2017

libxml2 could be made to crash if it opened a specially crafted file.

Releases

Packages

Details

Wei Lei discovered that libxml2 incorrecty handled certain parameter
entities. An attacker could use this issue with specially constructed XML
data to cause libxml2 to consume resources, leading to a denial of service.

References

Related notices

  • USN-3504-2: libxml2-utils, libxml2, python-libxml2
  • USN-3739-1: libxml2-udeb, libxml2-dev, libxml2-utils, libxml2, python-libxml2, python3-libxml2, libxml2-doc