Wind River Support Network

HomeDefectsLIN8-11950

Fixed

LIN8-11950 : Security Advisory - libxml2 - CVE-2019-19956

Created: Dec 26, 2019 Updated: Jan 21, 2020

Resolved Date: Jan 21, 2020

Found In Version: 8.0.0.1

Fix Version: 8.0.0.33

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

CREATE(Triage):(User=admin) [CVE-2019-19956|https://nvd.nist.gov/vuln/detail/CVE-2019-19956]

CVEs

CVE-2019-19956