Summary
It was discovered that libxml2 incorrecty handled certain files. An attacker
could use this issue with specially constructed XML data to cause libxml2 to
consume resources, leading to a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libxml2 | 2.9.1+dfsg1-3ubuntu4.12 |
| Ubuntu · 16.04 LTS 16.04:LTS | libxml2 | 2.9.3+dfsg1-1ubuntu0.5 |
Vulnerabilities 1
-
High 8.8
Nokogiri gem, via libxml, is affected by DoS vulnerabilities
Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
References
-
report
https://ubuntu.com/security/CVE-2017-15412