Buffer Over-read Vulnerability in Libxml2 Affects Xmllint Tool
CVE-2024-34459

Currently unrated

Key Information:

Vendor
GNOME
Status
Libxml2
Vendor
CVE Published:
14 May 2024

Summary

A vulnerability exists in the xmllint tool, part of the Libxml2 library, which can lead to a buffer over-read when using the --htmlout option. This occurs due to improper formatting of error messages in the xmlHTMLPrintFileContext function, impacting versions before 2.11.8 and 2.12.x prior to 2.12.7. Users are encouraged to update to the latest versions to mitigate potential security risks.

References

https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.8
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.7
https://gitlab.gnome.org/GNOME/libxml2/-/issues/720

Timeline

  • Vulnerability published

.