USN-3504-1: libxml2 vulnerability

05 December 2017

libxml2 could be made to crash if it opened a specially crafted file.

Releases

Packages

  • libxml2 - GNOME XML library

Details

Wei Lei discovered that libxml2 incorrecty handled certain parameter
entities. An attacker could use this issue with specially constructed XML
data to cause libxml2 to consume resources, leading to a denial of service.

References