CVE-2017-8872
The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
- Обновитесь до 2.9.3+dfsg1-1ubuntu0.7+esm1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в libxml2 опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 42
The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.