Wind River Support Network

HomeDefectsLIN1018-6659

Fixed

LIN1018-6659 : Security Advisory - libxml2 - CVE-2020-24977

Created: Sep 6, 2020 Updated: May 13, 2022

Resolved Date: Sep 23, 2020

Found In Version: 10.18.44.1

Fix Version: 10.18.44.19

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).

CREATE(Triage):(User=admin) CVE-2020-24977 (https://nvd.nist.gov/vuln/detail/CVE-2020-24977)

CVEs

CVE-2020-24977