Description
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low
Affected products
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / enterprise_linux10.0 – 10.0
- RedHat / enterprise_linux6.0 – 6.0
- RedHat / enterprise_linux7.0 – 7.0
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / jboss_core_services
- RedHat / openshift_container_platform4.0 – 4.0
- xmlsoft / libxml2
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:36734
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:39304
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:39317
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:44481
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:46836
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:53371
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:58981
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:70596
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:70639
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:72394
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:72395
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:72399
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:72470
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:72475
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:72476
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:72502
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:73859
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:73909
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:73929
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:73930
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:73959
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:73960
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:73961
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:73962
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74359
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74360
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74361
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74362
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74363
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74364
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74365
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74450
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74458
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74459
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74460
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74461
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74462
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74463
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74674
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74677
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74678
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74679
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74681
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74683
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74685
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74687
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74688
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:74771
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:7519
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:75652
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:75654
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:75655
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:75657
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:75658
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:75659
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:75660
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:76042
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:79118
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:79119
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:79120
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:79121
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:80756
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:81127
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82059
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82061
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82066
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82304
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82322
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82336
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82347
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82354
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82368
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82371
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82372
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82415
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82857
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:82888
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2025-6170
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2372952
- MISChttps://gitlab.gnome.org/GNOME/libxml2/-/issues/941
Updated 25m ago · 8 sources