Description
Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27,
and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause
a denial of service (application crash) via a large depth of element
declarations in a DTD, related to a function recursion, as demonstrated by
the Codenomicon XML fuzzing framework.
Package
| Upstream: | needs-triage
|
| Ubuntu 22.04 LTS (Jammy Jellyfish): | DNE
|
Patches:
Updated: 2022-02-10 23:37:50 UTC (commit acb3d89ab51f1d5e5543fa993969c0eb13c71f04)