A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
Se detectó una falla en el shell interactivo de la herramienta de línea de comandos xmllint, utilizada para analizar archivos XML. Cuando un usuario introduce un comando demasiado largo, el programa no verifica correctamente el tamaño de entrada, lo que puede provocar un bloqueo. Este problema podría permitir a los atacantes ejecutar código dañino en configuraciones poco comunes sin protecciones modernas.
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | HIGH |
| Privileges Required | NONE |
| User Interaction | REQUIRED |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | LOW |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-121
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| redhat | jboss_core_services | - | <built-in method update of dict object at 0x7f764032c180> | Application |
| redhat | openshift_container_platform | 4.0 | <built-in method update of dict object at 0x7f763806b880> | Application |
| redhat | enterprise_linux | 6.0 | <built-in method update of dict object at 0x7f7638068640> | Operating System |
| redhat | enterprise_linux | 7.0 | <built-in method update of dict object at 0x7f763806b640> | Operating System |
| redhat | enterprise_linux | 8.0 | <built-in method update of dict object at 0x7f764032ca00> | Operating System |
| redhat | enterprise_linux | 9.0 | <built-in method update of dict object at 0x7f764032fd80> | Operating System |
| redhat | enterprise_linux | 10.0 | <built-in method update of dict object at 0x7f7638069f40> | Operating System |
| xmlsoft | libxml2 | - | <built-in method update of dict object at 0x7f7638069700> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:xmlsoft:libxml2:-:*:*:*:*:*:*:* |