Yüksek CVSS 7.5 PoC var
CVE-2025-6021: Libxml2: sınır dışı yazma
Açıklama (NVD)
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
Özet bilgiler
- Ürün
- Xmlsoft Libxml2
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %1,37 (yüzdelik 72)
- CWE
- CWE-787
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| xmlsoft-libxml2 | — | — | 2.14.4 |
| redhat-jboss-core-services | — | — | — |
| redhat-openshift-container-platform | 4.12 | 4.12 | — |
| redhat-openshift-container-platform | 4.13 | 4.13 | — |
| redhat-openshift-container-platform | 4.14 | 4.14 | — |
| redhat-openshift-container-platform | 4.15 | 4.15 | — |
| redhat-openshift-container-platform | 4.16 | 4.16 | — |
| redhat-openshift-container-platform | 4.17 | 4.17 | — |
| redhat-openshift-container-platform | 4.18 | 4.18 | — |
| redhat-openshift-container-platform-for-arm64 | 4.13 | 4.13 | — |
| redhat-openshift-container-platform-for-arm64 | 4.14 | 4.14 | — |
| redhat-openshift-container-platform-for-arm64 | 4.15 | 4.15 | — |
| redhat-openshift-container-platform-for-arm64 | 4.16 | 4.16 | — |
| redhat-openshift-container-platform-for-arm64 | 4.17 | 4.17 | — |
| redhat-openshift-container-platform-for-arm64 | 4.18 | 4.18 | — |
| redhat-openshift-container-platform-for-ibm-z | 4.13 | 4.13 | — |
| redhat-openshift-container-platform-for-ibm-z | 4.14 | 4.14 | — |
| redhat-openshift-container-platform-for-ibm-z | 4.15 | 4.15 | — |
| redhat-openshift-container-platform-for-ibm-z | 4.16 | 4.16 | — |
| redhat-openshift-container-platform-for-ibm-z | 4.17 | 4.17 | — |
| redhat-openshift-container-platform-for-ibm-z | 4.18 | 4.18 | — |
| redhat-openshift-container-platform-for-linuxone | 4.13 | 4.13 | — |
| redhat-openshift-container-platform-for-linuxone | 4.14 | 4.14 | — |
| redhat-openshift-container-platform-for-linuxone | 4.15 | 4.15 | — |
| redhat-openshift-container-platform-for-linuxone | 4.16 | 4.16 | — |
| redhat-openshift-container-platform-for-linuxone | 4.17 | 4.17 | — |
| redhat-openshift-container-platform-for-linuxone | 4.18 | 4.18 | — |
| redhat-openshift-container-platform-for-power | 4.13 | 4.13 | — |
| redhat-openshift-container-platform-for-power | 4.14 | 4.14 | — |
| redhat-openshift-container-platform-for-power | 4.15 | 4.15 | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- CWE-787