Summary
It was discovered that lixml2 incorrectly handled certain XML files.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code. (CVE-2023-28484)
It was discovered that libxml2 incorrectly handled certain XML files.
An attacker could possibly use this issue to cause a crash.
(CVE-2023-29469)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.9 |
| Ubuntu · 20.04 LTS 20.04:LTS | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.6 |
| Ubuntu · 22.04 LTS 22.04:LTS | libxml2 | 2.9.13+dfsg-1ubuntu0.3 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libxml2 | 2.9.1+dfsg1-3ubuntu4.13+esm5 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm5 |
Vulnerabilities 2
-
Medium 6.5
In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequentl…
-
Medium 6.5
An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictCom…