Wind River Support Network

HomeDefectsLIN9-7258
Fixed

LIN9-7258 : Security Advisory - libxml2 - CVE-2018-14404

Created: Jul 31, 2018    Updated: Dec 3, 2018
Resolved Date: Aug 10, 2018
Found In Version: unknown
Fix Version: 9.0.0.18
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14404

Other Downloads


CVEs


Live chat
Online