Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 620
Alerts This Week
Warning Icon 1 620

Debian 8 Jessie DLA-1524-1 Fix: Libxml2 Denial Of Service Vulnerability

debian lts
Calendar Grey September 27, 2018
Dist Debian Esm H88
A security patch for libxml2 addresses severe vulnerabilities such as denial of service and excessive memory usage on Debian 8.
CVE-2018-14404 Fix of a NULL pointer dereference which might result in a crash and thus in a denial of service
Topics%20covered

Topics Covered

security advisory denial of service debian CVE fix libxml2 memory limit

Summary

CVE-2018-14567 and CVE-2018-9251
Approvement in LZMA error handling which prevents an infinite loop.

CVE-2017-18258
Limit available memory to 100MB to avoid exhaustive memory
consumption by malicious files.


For Debian 8 "Jessie", these problems have been fixed in version
2.9.1+dfsg1-5+deb8u7.

We recommend that you upgrade your libxml2 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libxml2
Version: 2.9.1+dfsg1-5+deb8u7
CVE ID: CVE-2017-18258 CVE-2018-9251 CVE-2018-14404

Topics%20covered

Topics Covered

security advisory denial of service debian CVE fix libxml2 memory limit

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.