Description
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux10.0 – 10.0
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / enterprise_linux_eus8.4 – 8.4
- RedHat / enterprise_linux_eus10.0 – 10.0
- RedHat / enterprise_linux_eus9.6 – 9.6
- RedHat / enterprise_linux_eus9.4 – 9.4
- RedHat / enterprise_linux_eus8.8 – 8.8
- RedHat / enterprise_linux_eus8.6 – 8.6
- RedHat / enterprise_linux_for_arm_649.0_aarch64 – 9.0_aarch64
- RedHat / enterprise_linux_for_arm_648.0_aarch64 – 8.0_aarch64
- RedHat / enterprise_linux_for_arm_6410.0_aarch64 – 10.0_aarch64
- RedHat / enterprise_linux_for_arm_649.4_aarch64 – 9.4_aarch64
- RedHat / enterprise_linux_for_arm_64_eus10.0_aarch64 – 10.0_aarch64
- RedHat / enterprise_linux_for_arm_64_eus9.6_aarch64 – 9.6_aarch64
- RedHat / enterprise_linux_for_arm_64_eus9.4_aarch64 – 9.4_aarch64
- RedHat / enterprise_linux_for_ibm_z_systems8.0_s390x – 8.0_s390x
- RedHat / enterprise_linux_for_ibm_z_systems10.0_s390x – 10.0_s390x
- RedHat / enterprise_linux_for_ibm_z_systems9.4_s390x – 9.4_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.6_s390x – 9.6_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.0_s390x – 9.0_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus10.0_s390x – 10.0_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.4_s390x – 9.4_s390x
- RedHat / enterprise_linux_for_power_little_endian8.0_ppc64le – 8.0_ppc64le
- RedHat / enterprise_linux_for_power_little_endian10.0_ppc64le – 10.0_ppc64le
- RedHat / enterprise_linux_for_power_little_endian9.0_ppc64le – 9.0_ppc64le
- RedHat / enterprise_linux_for_power_little_endian_eus9.6_ppc64le – 9.6_ppc64le
- RedHat / enterprise_linux_for_power_little_endian_eus10.0_ppc64le – 10.0_ppc64le
- RedHat / enterprise_linux_for_power_little_endian_eus9.4_ppc64le – 9.4_ppc64le
- RedHat / enterprise_linux_server7.0 – 7.0
- RedHat / enterprise_linux_server_aus8.2 – 8.2
- RedHat / enterprise_linux_server_aus9.4 – 9.4
- RedHat / enterprise_linux_server_aus9.2 – 9.2
- RedHat / enterprise_linux_server_aus8.6 – 8.6
- RedHat / enterprise_linux_server_aus8.4 – 8.4
- RedHat / enterprise_linux_server_aus9.6 – 9.6
- RedHat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.4_ppc64le – 9.4_ppc64le
- RedHat / enterprise_linux_server_tus8.8 – 8.8
- RedHat / in-vehicle_operating_system1.0 – 1.0
- RedHat / jboss_core_services
- RedHat / openshift_container_platform4.17 – 4.17
- RedHat / openshift_container_platform4.12 – 4.12
- RedHat / openshift_container_platform4.13 – 4.13
- RedHat / openshift_container_platform4.14 – 4.14
- RedHat / openshift_container_platform4.15 – 4.15
- RedHat / openshift_container_platform4.16 – 4.16
- RedHat / openshift_container_platform4.18 – 4.18
- RedHat / openshift_container_platform_for_arm644.15 – 4.15
- RedHat / openshift_container_platform_for_arm644.18 – 4.18
- RedHat / openshift_container_platform_for_arm644.17 – 4.17
- RedHat / openshift_container_platform_for_arm644.16 – 4.16
- RedHat / openshift_container_platform_for_arm644.14 – 4.14
- RedHat / openshift_container_platform_for_arm644.13 – 4.13
- RedHat / openshift_container_platform_for_ibm_z4.18 – 4.18
- RedHat / openshift_container_platform_for_ibm_z4.13 – 4.13
- RedHat / openshift_container_platform_for_ibm_z4.14 – 4.14
- RedHat / openshift_container_platform_for_ibm_z4.15 – 4.15
- RedHat / openshift_container_platform_for_ibm_z4.16 – 4.16
- RedHat / openshift_container_platform_for_ibm_z4.17 – 4.17
- RedHat / openshift_container_platform_for_linuxone4.16 – 4.16
- RedHat / openshift_container_platform_for_linuxone4.13 – 4.13
- RedHat / openshift_container_platform_for_linuxone4.14 – 4.14
- RedHat / openshift_container_platform_for_linuxone4.18 – 4.18
- RedHat / openshift_container_platform_for_linuxone4.15 – 4.15
- RedHat / openshift_container_platform_for_linuxone4.17 – 4.17
- RedHat / openshift_container_platform_for_power4.17 – 4.17
- RedHat / openshift_container_platform_for_power4.18 – 4.18
- RedHat / openshift_container_platform_for_power4.13 – 4.13
- RedHat / openshift_container_platform_for_power4.14 – 4.14
- RedHat / openshift_container_platform_for_power4.15 – 4.15
- RedHat / openshift_container_platform_for_power4.16 – 4.16
- xmlsoft / libxml22.14.4
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10630
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10698
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10699
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:11580
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:11673
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:12098
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:12099
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:12199
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:12237
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:12239
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:12240
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:12241
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:13267
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:13289
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:13325
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:13335
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:13336
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:14059
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:14396
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:15308
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:15672
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19020
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:7519
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2025-6021
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2372406
- MISChttps://gitlab.gnome.org/GNOME/libxml2/-/issues/926
Updated 20m ago · 8 sources