Summary
It was discovered that libxml2 incorrectly handled certain memory
operations. A remote attacker could use this issue to cause libxml2 to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and
Ubuntu 18.04 LTS. (CVE-2022-49043)
It was discovered that the libxml2 xmllint tool incorrectly handled
certain memory operations. If a user or automated system were tricked into
running xmllint on a specially crafted xml file, a remote attacker could
cause xmllint to crash, resulting in a denial of service. This issue only
affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.
(CVE-2024-34459)
It was discovered that libxml2 did not properly manage memory. An attacker
could possibly use this issue to cause a denial of service or execute
arbitrary code. (CVE-2024-56171)
It was discovered that libxml2 could be made to write out of bounds. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. (CVE-2025-24928)
It was discovered that libxml2 could be made to dereference invalid memory.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2025-27113)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.9 |
| Ubuntu · 22.04 LTS 22.04:LTS | libxml2 | 2.9.13+dfsg-1ubuntu0.6 |
| Ubuntu · 24.04 LTS 24.04:LTS | libxml2 | 2.9.14+dfsg-1.3ubuntu3.2 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libxml2 | 2.9.1+dfsg1-3ubuntu4.13+esm7 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm7 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.9+esm2 |
Vulnerabilities 5
-
High 8.1
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
-
High 7.8
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleI…
-
High 7.8
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To…
-
High 7.5
An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages wit…
-
Low 2.9
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.