ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2024-25062
7.5высокая

CVE-2024-25062

Описание

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Затрагиваемое ПО
Xmlsoft Libxml2
CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Источники
https://gitlab.gnome.org/GNOME/libxml2/-/issues/604https://gitlab.gnome.org/GNOME/libxml2/-/tagshttps://gitlab.gnome.org/GNOME/libxml2/-/issues/604https://gitlab.gnome.org/GNOME/libxml2/-/tagshttps://lists.debian.org/debian-lts-announce/2025/02/msg00028.htmlhttps://security.netapp.com/advisory/ntap-20241018-0009/