Wind River Support Network

HomeDefectsLIN10-4439
Fixed

LIN10-4439 : Security Advisory - libxml2 - CVE-2018-14404

Created: Jul 31, 2018    Updated: Dec 3, 2018
Resolved Date: Aug 9, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.10
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14404

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube