Summary
It was discovered that libxml2 incorrectly handled certain XML files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2019-19956, CVE-2020-7595)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libxml2 | 2.9.3+dfsg1-1ubuntu0.7 |
| Ubuntu · 18.04 LTS 18.04:LTS | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.3 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libxml2 | 2.9.1+dfsg1-3ubuntu4.13+esm1 |
Vulnerabilities 2
-
High 7.5
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.
-
High 7.5
libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.