ISOMAN

CVE

CVE-2018-14404

A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. https://access.redhat.com/errata/RHSA-2019:1543
  2. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901817
  3. https://bugzilla.redhat.com/show_bug.cgi?id=1595985
  4. https://gitlab.gnome.org/GNOME/libxml2/issues/10
  5. https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html
  6. https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html
  7. https://security.netapp.com/advisory/ntap-20190719-0002/
  8. https://usn.ubuntu.com/3739-1/
  9. https://usn.ubuntu.com/3739-2/
  10. https://access.redhat.com/errata/RHSA-2019:1543
  11. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901817
  12. https://bugzilla.redhat.com/show_bug.cgi?id=1595985
  13. https://gitlab.gnome.org/GNOME/libxml2/issues/10
  14. https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html
  15. https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html
  16. https://security.netapp.com/advisory/ntap-20190719-0002/
  17. https://usn.ubuntu.com/3739-1/
  18. https://usn.ubuntu.com/3739-2/