Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Ubuntu 24.10 USN-7307-1 Critical: libxmltok Denial of Service Threat

ubuntu
Calendar Grey February 27, 2025
Dist Ubuntu Esm H88
Ubuntu Security Advisory USN-7308-1 discusses vulnerabilities in libcurl that may expose systems to remote code execution risks.
Libxmltok could be made to crash if it opened a specially crafted file.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Libxmltok could be made to crash if it opened a specially crafted file. Software Description: - libxmltok: XML Parser Toolkit, developer libraries Details: Tim Boddy discovered that Expat, contained within the xmltok library, did not properly handle memory reallocation when processing XML files. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service by consuming excessive memory resources.

Topics%20covered

Topics Covered

security advisory denial of service update critical Ubuntu memory consumption memory issues libxmltok

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10   libxmltok1t64                   1.2-4.1ubuntu3.2 Ubuntu 24.04 LTS   libxmltok1t64                   1.2-4.1ubuntu2.24.0.4.1+esm3                                   Available with Ubuntu Pro Ubuntu 22.04 LTS   libxmltok1                      1.2-4ubuntu0.22.04.1~esm5                                   Available with Ubuntu Pro Ubuntu 20.04 LTS   libxmltok1                      1.2-4ubuntu0.20.04.1~esm5                                   Available with Ubuntu Pro Ubuntu 18.04 LTS   libxmltok1                      1.2-4ubuntu0.18.04.1~esm5                                   Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7307-1

  CVE-2012-1148

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7307-1

Topics%20covered

Topics Covered

security advisory denial of service update critical Ubuntu memory consumption memory issues libxmltok

Package Information

  https://launchpad.net/ubuntu/+source/libxmltok/1.2-4.1ubuntu3.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here