Alerts This Week
Warning Icon 1 1,394
Alerts This Week
Warning Icon 1 1,394

Ubuntu 24.10 USN-7307-1 Critical: libxmltok Denial of Service Threat

ubuntu
Calendar Grey February 27, 2025
Dist Ubuntu Esm H88
Ubuntu Security Advisory USN-7308-1 discusses vulnerabilities in libcurl that may expose systems to remote code execution risks.
Libxmltok could be made to crash if it opened a specially crafted file.

Summary

Libxmltok could be made to crash if it opened a specially crafted

file.

Software Description:

- libxmltok: XML Parser Toolkit, developer libraries

Details:

Tim Boddy discovered that Expat, contained within the xmltok library, did

not properly handle memory reallocation when processing XML files. If a

user or application linked against Expat were tricked into opening a

crafted XML file, an attacker could cause a denial of service by consuming

excessive memory resources.

Topics%20covered

Topics Covered

security advisory denial of service update critical Ubuntu memory consumption memory issues libxmltok

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   libxmltok1t64                   1.2-4.1ubuntu3.2

Ubuntu 24.04 LTS
   libxmltok1t64                   1.2-4.1ubuntu2.24.0.4.1+esm3
                                   Available with Ubuntu Pro

Ubuntu 22.04 LTS
   libxmltok1                      1.2-4ubuntu0.22.04.1~esm5
                                   Available with Ubuntu Pro

Ubuntu 20.04 LTS
   libxmltok1                      1.2-4ubuntu0.20.04.1~esm5
                                   Available with Ubuntu Pro

Ubuntu 18.04 LTS
   libxmltok1                      1.2-4ubuntu0.18.04.1~esm5
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7307-1

  CVE-2012-1148

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7307-1

Topics%20covered

Topics Covered

security advisory denial of service update critical Ubuntu memory consumption memory issues libxmltok

Package Information

  https://launchpad.net/ubuntu/+source/libxmltok/1.2-4.1ubuntu3.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here