{ "document": { "aggregate_severity": { "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* SECURITY UPDATE: NULL pointer dereference in xmlSchemaFixupComplexType\n - debian/patches/libxml2-2.10.2-CVE-2023-28484.patch: check\n baseType->subtypes for NULL before splicing the base type's particle\n in front of the derived type's in xmlSchemaFixupComplexType() in\n xmlschemas.c; backport of upstream libxml2 e4f85f1b (v2.10.4). A\n base type declared with simpleContent has no particle, so a schema\n whose child type extends such a base by complexContent reached that\n arm with a NULL particle and dereferenced it. The schema is invalid\n and is rejected a moment later, but the crash happens first, at\n parse time. Reachable from anything that parses an attacker-supplied\n .xsd, including xmllint --schema and every caller of\n xmlSchemaParse(). Upstream's three issue491 test files are not\n carried: the Schemas target globs test/schemas/*_*.xsd, so they\n would change the generated test list rather than slot into a case\n - CVE-2023-28484\n * SECURITY UPDATE: non-deterministic hashing of empty dictionary strings\n - debian/patches/libxml2-2.10.2-CVE-2023-29469.patch: guard\n namelen <= 0 as well as a NULL name, and return the per-dictionary\n seed rather than the constant 0, in xmlDictComputeFastKey() in\n dict.c; backport of upstream libxml2 547edbf1 (v2.10.4). The old\n guard covered only the NULL case, so a zero-length name that is not\n NUL-terminated fell through to `value += *name` and read one byte\n past the end of the string. Upstream states the impact as \"various\n logic or memory errors, including double frees\": the inconsistent\n key makes the dictionary return the wrong answer for an empty name,\n and callers that free on the strength of it can double free. Taking\n the seed into account is the secondary half of the change and,\n upstream's words, \"shouldn't have an impact on security\".\n xmlDictComputeBigKey() returns the same constant for an empty name\n but is left alone, as upstream left it; it has no out-of-bounds\n read, since it tests namelen <= 0 before touching the data\n - CVE-2023-29469\n * SECURITY UPDATE: buffer over-read in xmllint --htmlout\n - debian/patches/libxml2-2.10.2-CVE-2024-34459.patch: bound the second\n backscan in xmlHTMLPrintFileContext() in xmllint.c by `cur > base`,\n the guard the first backscan already carries; backport of upstream\n libxml2 3ad7f816 (v2.12.7), also on the 2.11 branch as 8ddc7f13.\n The loop that recomputes the caret column walked backwards over\n newlines with no lower bound, so a parser position at the start of\n the buffer preceded by newlines ran off the front of input->base and\n kept dereferencing. The function is static to xmllint.c and runs\n only under --htmlout, so this is the command-line tool rather than\n the library, and it is a read rather than a write - but xmllint\n ships in this package on every platform\n - CVE-2024-34459\n * SECURITY UPDATE: unbounded recursion in catalog URI resolution\n - debian/patches/libxml2-2.10.2-CVE-2026-0990.patch: give\n xmlCatalogListXMLResolveURI() in catalog.c the MAX_CATAL_DEPTH test\n and depth accounting that xmlCatalogXMLResolve() has carried for the\n public-identifier path all along (test at catalog.c:1635, increment\n at 1641), and walk a separate cursor so\n the decrements on exit apply to the entry that was incremented;\n backport of upstream libxml2 ac6f0fde (v2.15.2), whose twin commit\n 1961208e is byte-identical. A delegateURI entry pointing back at its\n own catalog, or any cycle among several catalogs, made\n xmlCatalogListXMLResolveURI() and xmlCatalogXMLResolveURI() recurse\n without bound until the stack was exhausted and the process died.\n Reachable wherever catalog resolution runs over catalog files an\n attacker can influence, including XML_CATALOG_FILES, xmlcatalog and\n xmllint --catalogs. Note the separate MAX_CATAL_DEPTH test at\n catalog.c:1872, in xmlCatalogXMLResolveURI(), has no matching\n increment on that path - it tests the entry handed in at 2132 while\n both increments are on catal elsewhere. Not claimed to be\n unreachable in general: xmlCatalogXMLResolve() has a\n non-decrementing return at 1830-1831 and parsed catalogs are cached\n globally, so a leaked depth could accumulate; that is upstream's and\n is not introduced here. Upstream's two test commits are not carried\n - CVE-2026-0990", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701", "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_common/debian11/advisories/2026/clsa-2026_1792494701.json" } ], "tracking": { "current_release_date": "2026-10-20T11:12:38Z", "generator": { "date": "2026-10-20T11:12:38Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792494701", "initial_release_date": "2026-10-20T11:12:38Z", "revision_history": [ { "date": "2026-10-20T11:12:38Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix CVE(s): CVE-2023-28484, CVE-2023-29469, CVE-2024-34459, CVE-2026-0990" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 11", "product": { "name": "Debian 11", "product_id": "Debian-11", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:11:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-libxml2-0:2.10.2-8.amd64", "product": { "name": "alt-libxml2-0:2.10.2-8.amd64", "product_id": "alt-libxml2-0:2.10.2-8.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2@2.10.2-8?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-static-0:2.10.2-8.amd64", "product": { "name": "alt-libxml2-static-0:2.10.2-8.amd64", "product_id": "alt-libxml2-static-0:2.10.2-8.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-static@2.10.2-8?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-devel-0:2.10.2-8.amd64", "product": { "name": "alt-libxml2-devel-0:2.10.2-8.amd64", "product_id": "alt-libxml2-devel-0:2.10.2-8.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-devel@2.10.2-8?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-devel-0:2.10.2-7.amd64", "product": { "name": "alt-libxml2-devel-0:2.10.2-7.amd64", "product_id": "alt-libxml2-devel-0:2.10.2-7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-devel@2.10.2-7?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-0:2.10.2-7.amd64", "product": { "name": "alt-libxml2-0:2.10.2-7.amd64", "product_id": "alt-libxml2-0:2.10.2-7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2@2.10.2-7?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-static-0:2.10.2-7.amd64", "product": { "name": "alt-libxml2-static-0:2.10.2-7.amd64", "product_id": "alt-libxml2-static-0:2.10.2-7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-static@2.10.2-7?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-devel-0:2.10.2-5.amd64", "product": { "name": "alt-libxml2-devel-0:2.10.2-5.amd64", "product_id": "alt-libxml2-devel-0:2.10.2-5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-devel@2.10.2-5?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-0:2.10.2-5.amd64", "product": { "name": "alt-libxml2-0:2.10.2-5.amd64", "product_id": "alt-libxml2-0:2.10.2-5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2@2.10.2-5?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-static-0:2.10.2-5.amd64", "product": { "name": "alt-libxml2-static-0:2.10.2-5.amd64", "product_id": "alt-libxml2-static-0:2.10.2-5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-static@2.10.2-5?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-devel-0:2.10.2-4.amd64", "product": { "name": "alt-libxml2-devel-0:2.10.2-4.amd64", "product_id": "alt-libxml2-devel-0:2.10.2-4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-devel@2.10.2-4?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-static-0:2.10.2-4.amd64", "product": { "name": "alt-libxml2-static-0:2.10.2-4.amd64", "product_id": "alt-libxml2-static-0:2.10.2-4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-static@2.10.2-4?arch=amd64&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-0:2.10.2-4.amd64", "product": { "name": "alt-libxml2-0:2.10.2-4.amd64", "product_id": "alt-libxml2-0:2.10.2-4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2@2.10.2-4?arch=amd64&os_name=debian&os_version=11" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "alt-libxml2-doc-0:2.10.2-8.all", "product": { "name": "alt-libxml2-doc-0:2.10.2-8.all", "product_id": "alt-libxml2-doc-0:2.10.2-8.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-doc@2.10.2-8?arch=all&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-doc-0:2.10.2-7.all", "product": { "name": "alt-libxml2-doc-0:2.10.2-7.all", "product_id": "alt-libxml2-doc-0:2.10.2-7.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-doc@2.10.2-7?arch=all&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-doc-0:2.10.2-5.all", "product": { "name": "alt-libxml2-doc-0:2.10.2-5.all", "product_id": "alt-libxml2-doc-0:2.10.2-5.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-doc@2.10.2-5?arch=all&os_name=debian&os_version=11" } } }, { "category": "product_version", "name": "alt-libxml2-doc-0:2.10.2-4.all", "product": { "name": "alt-libxml2-doc-0:2.10.2-4.all", "product_id": "alt-libxml2-doc-0:2.10.2-4.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-libxml2-doc@2.10.2-4?arch=all&os_name=debian&os_version=11" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-0:2.10.2-8.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-0:2.10.2-8.amd64" }, "product_reference": "alt-libxml2-0:2.10.2-8.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-static-0:2.10.2-8.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-static-0:2.10.2-8.amd64" }, "product_reference": "alt-libxml2-static-0:2.10.2-8.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-devel-0:2.10.2-8.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-devel-0:2.10.2-8.amd64" }, "product_reference": "alt-libxml2-devel-0:2.10.2-8.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-doc-0:2.10.2-8.all as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-doc-0:2.10.2-8.all" }, "product_reference": "alt-libxml2-doc-0:2.10.2-8.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-devel-0:2.10.2-7.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64" }, "product_reference": "alt-libxml2-devel-0:2.10.2-7.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-0:2.10.2-7.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-0:2.10.2-7.amd64" }, "product_reference": "alt-libxml2-0:2.10.2-7.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-doc-0:2.10.2-7.all as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-doc-0:2.10.2-7.all" }, "product_reference": "alt-libxml2-doc-0:2.10.2-7.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-static-0:2.10.2-7.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" }, "product_reference": "alt-libxml2-static-0:2.10.2-7.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-devel-0:2.10.2-5.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64" }, "product_reference": "alt-libxml2-devel-0:2.10.2-5.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-0:2.10.2-5.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-0:2.10.2-5.amd64" }, "product_reference": "alt-libxml2-0:2.10.2-5.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-static-0:2.10.2-5.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64" }, "product_reference": "alt-libxml2-static-0:2.10.2-5.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-doc-0:2.10.2-5.all as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-doc-0:2.10.2-5.all" }, "product_reference": "alt-libxml2-doc-0:2.10.2-5.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-devel-0:2.10.2-4.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64" }, "product_reference": "alt-libxml2-devel-0:2.10.2-4.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-static-0:2.10.2-4.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64" }, "product_reference": "alt-libxml2-static-0:2.10.2-4.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-0:2.10.2-4.amd64 as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-0:2.10.2-4.amd64" }, "product_reference": "alt-libxml2-0:2.10.2-4.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "alt-libxml2-doc-0:2.10.2-4.all as a component of Debian 11", "product_id": "Debian-11:alt-libxml2-doc-0:2.10.2-4.all" }, "product_reference": "alt-libxml2-doc-0:2.10.2-4.all", "relates_to_product_reference": "Debian-11" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-0990", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "notes": [ { "category": "description", "text": "A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:alt-libxml2-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-8.all", "Debian-11:alt-libxml2-static-0:2.10.2-8.amd64" ], "known_affected": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2026-0990" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7519", "url": "https://access.redhat.com/errata/RHSA-2026:7519" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-0990", "url": "https://access.redhat.com/security/cve/CVE-2026-0990" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2429959", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429959" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018", "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018" } ], "release_date": "2026-01-15T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-20T11:11:43.580642Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701", "product_ids": [ "Debian-11:alt-libxml2-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-8.all", "Debian-11:alt-libxml2-static-0:2.10.2-8.amd64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701" }, { "category": "none_available", "date": "2026-01-15T15:15:00Z", "details": "Affected", "product_ids": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-28484", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:alt-libxml2-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-8.all", "Debian-11:alt-libxml2-static-0:2.10.2-8.amd64" ], "known_affected": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2023-28484" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/491", "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/491" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4", "url": "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html", "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230601-0006/", "url": "https://security.netapp.com/advisory/ntap-20230601-0006/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240201-0005/", "url": "https://security.netapp.com/advisory/ntap-20240201-0005/" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-341067.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-341067.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-556635.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-556635.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-625862.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-625862.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html" } ], "release_date": "2023-04-24T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-20T11:11:43.580642Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701", "product_ids": [ "Debian-11:alt-libxml2-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-8.all", "Debian-11:alt-libxml2-static-0:2.10.2-8.amd64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701" }, { "category": "none_available", "date": "2023-04-24T21:15:00Z", "details": "Affected", "product_ids": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-34459", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:alt-libxml2-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-8.all", "Debian-11:alt-libxml2-static-0:2.10.2-8.amd64" ], "known_affected": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2024-34459" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/720", "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/720" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.8", "url": "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.8" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.7", "url": "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.7" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5HVUXKYTBWT3G5DEEQX62STJQBY367NL/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5HVUXKYTBWT3G5DEEQX62STJQBY367NL/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/INKSSLW5VMZIXHRPZBAW4TJUX5SQKARG/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/INKSSLW5VMZIXHRPZBAW4TJUX5SQKARG/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VRDJCNQP32LV56KESUQ5SNZKAJWSZZRI/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VRDJCNQP32LV56KESUQ5SNZKAJWSZZRI/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html", "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5HVUXKYTBWT3G5DEEQX62STJQBY367NL/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5HVUXKYTBWT3G5DEEQX62STJQBY367NL/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/INKSSLW5VMZIXHRPZBAW4TJUX5SQKARG/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/INKSSLW5VMZIXHRPZBAW4TJUX5SQKARG/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VRDJCNQP32LV56KESUQ5SNZKAJWSZZRI/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VRDJCNQP32LV56KESUQ5SNZKAJWSZZRI/" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html" } ], "release_date": "2024-05-14T15:39:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-20T11:11:43.580642Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701", "product_ids": [ "Debian-11:alt-libxml2-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-8.all", "Debian-11:alt-libxml2-static-0:2.10.2-8.amd64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701" }, { "category": "none_available", "date": "2024-05-14T15:39:00Z", "details": "Affected", "product_ids": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-29469", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-11:alt-libxml2-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-8.all", "Debian-11:alt-libxml2-static-0:2.10.2-8.amd64" ], "known_affected": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2023-29469" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/510", "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/510" }, { "category": "external", "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4", "url": "https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html", "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230601-0006/", "url": "https://security.netapp.com/advisory/ntap-20230601-0006/" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-341067.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-341067.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-556635.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-556635.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-625862.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-625862.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html" } ], "release_date": "2023-04-24T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-20T11:11:43.580642Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701", "product_ids": [ "Debian-11:alt-libxml2-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-8.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-8.all", "Debian-11:alt-libxml2-static-0:2.10.2-8.amd64" ], "url": "https://cve.tuxcare.com/els-alt-common/releases/CLSA-2026:1792494701" }, { "category": "none_available", "date": "2023-04-24T21:15:00Z", "details": "Affected", "product_ids": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-11:alt-libxml2-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-devel-0:2.10.2-7.amd64", "Debian-11:alt-libxml2-doc-0:2.10.2-4.all", "Debian-11:alt-libxml2-doc-0:2.10.2-5.all", "Debian-11:alt-libxml2-doc-0:2.10.2-7.all", "Debian-11:alt-libxml2-static-0:2.10.2-4.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-5.amd64", "Debian-11:alt-libxml2-static-0:2.10.2-7.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }