Denial of Service Vulnerability in libxml2 by Software Vendor

CVE-2009-2414

What is CVE-2009-2414?

libxml2 versions 2.5.10, 2.6.16, 2.6.26, 2.6.27, 2.6.32, and libxml 1.8.17 exhibit a vulnerability that can be exploited by attackers using specially crafted DTDs to leverage deep recursion in parsing element declarations. This recursion can result in excessive stack consumption, ultimately causing the application to crash. This flaw has been demonstrated using the Codenomicon XML fuzzing framework, highlighting the potential for denial of service attacks in systems reliant on these libraries.

References