CVE-2023-28484

Updated: 2024-02-01 19:49:08.239878

Description:

In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 6.5

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU libxml2 2.9.13 6.5 MEDIUM Ignored 2023-11-08 04:07:55
CentOS 6 ELS libxml2 2.7.6 6.5 MEDIUM Ignored 2023-04-20 11:04:44
CentOS 7 ELS libxml2 2.9.1 6.5 MEDIUM Ignored 2023-09-19 09:30:21
CentOS 8.4 ELS libxml2 2.9.7-9 6.5 MEDIUM Ignored 2023-04-20 08:47:55
CentOS 8.5 ELS libxml2 2.9.7-9 6.5 MEDIUM Ignored 2023-04-20 11:04:44
CloudLinux 6 ELS libxml2 2.7.6 6.5 MEDIUM Ignored 2023-04-20 11:04:44
Oracle Linux 6 ELS libxml2 2.7.6 6.5 MEDIUM Ignored 2023-04-20 11:04:44
Ubuntu 16.04 ELS libxml2 2.9.3 6.5 MEDIUM Released CLSA-2023:1682593947 2023-04-27 08:49:55
Ubuntu 18.04 ELS libxml2 2.9.4 6.5 MEDIUM Not Vulnerable 2023-06-14 09:06:09