CVE-2011-1944
Fixed in a distro release EPSS 13%
Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.
Products: xmlsoft libxml2, xmlsoft libxml
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxml2 | 2.7.8.dfsg-3 |
| Debian 13 | libxml2 | 2.7.8.dfsg-3 |
| Debian 14 | libxml2 | 2.7.8.dfsg-3 |
| Debian 5.0 | libxml2 | 2.6.32.dfsg-5+lenny4 |
| Debian 6.0 | libxml2 | 2.7.8.dfsg-2+squeeze1 |
| Red Hat Enterprise Linux 5 | libxml2 | 0:2.6.26-2.1.12.el5_7.2 |
| Red Hat Enterprise Linux 5 | libxml2-debuginfo | 0:2.6.26-2.1.12.el5_7.2 |
| Red Hat Enterprise Linux 5 | libxml2-devel | 0:2.6.26-2.1.12.el5_7.2 |
| Red Hat Enterprise Linux 5 | libxml2-python | 0:2.6.26-2.1.12.el5_7.2 |
| Red Hat Enterprise Linux 6 | libxml2 | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | libxml2-debuginfo | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | libxml2-devel | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | libxml2-python | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | libxml2-static | 0:2.7.6-4.el6 |
| Red Hat Enterprise Linux 6 | mingw32-libxml2 | 0:2.7.6-6.el6_3 |
| Red Hat Enterprise Linux 6 | mingw32-libxml2-debuginfo | 0:2.7.6-6.el6_3 |
| Red Hat Enterprise Linux 6 | mingw32-libxml2-static | 0:2.7.6-6.el6_3 |
| openSUSE Tumbleweed | libxml2 | 2.9.4-1.22 |