Bug 2372952 (CVE-2025-6170)
| Summary: | CVE-2025-6170 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | unspecified | CC: | akhatavk, aos-team-art-private, asdas, caswilli, crizzo, csutherl, dfreiber, dpaolell, drow, jburrell, jclere, jdelft, jmitchel, jtanner, jupierce, kaycoth, kshier, lgarciaa, mbiarnes, omaciel, pjindal, plodge, ppalepu, ppostler, prdhamdh, rhel-process-autobot, sghai, sidsharm, stcannon, suppawar, szappis, teagle, vchlup, vkumar, vlaad, watson-tool-maintainers, yguenane |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2372956, 2372957, 2372958, 2372959, 2372960, 2372961, 2372962, 2372963, 2372964, 2372965 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2025-06-16 06:00:53 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:36734 https://access.redhat.com/errata/RHSA-2026:36734 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:39304 https://access.redhat.com/errata/RHSA-2026:39304 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:39317 https://access.redhat.com/errata/RHSA-2026:39317 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:70596 https://access.redhat.com/errata/RHSA-2026:70596 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:70639 https://access.redhat.com/errata/RHSA-2026:70639 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Via RHSA-2026:79120 https://access.redhat.com/errata/RHSA-2026:79120 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:79119 https://access.redhat.com/errata/RHSA-2026:79119 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:79118 https://access.redhat.com/errata/RHSA-2026:79118 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:79121 https://access.redhat.com/errata/RHSA-2026:79121 |