[Bug 1281950] New: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

List overview All Threads
Download

newer

older

wine-gecko

[Bug 1281936] New: libxml2: Buffer...

Red Hat Bugzilla

13 Nov 2015 13 Nov '15

10:44 p.m.

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Bug ID: 1281950 Summary: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: athmanem@gmail.com, c.david86@gmail.com, erik-fedora@vanpienbroek.nl, fedora-mingw@lists.fedoraproject.org, ktietz@redhat.com, lfarkas@lfarkas.org, ohudlick@redhat.com, rjones@redhat.com, veillard@redhat.com

Stack-based buffer overread vulnerability with HTML parser in push mode in xmlSAX2TextNode causing segmentation fault when compiled with ASAN.

Upstream bug (containing reproducer):

https://bugzilla.gnome.org/show_bug.cgi?id=756372

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=S97GEQo7jh&a=cc_unsubscribe

Show replies by date

Red Hat Bugzilla

13 Nov 13 Nov

10:46 p.m.

New subject: [Bug 1281950] libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Adam Mariš amaris@redhat.com changed:

--- Comment #1 from Adam Mariš amaris@redhat.com ---

Created libxml2 tracking bugs for this issue:

Affects: fedora-all [bug 1281951]

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1281951 [Bug 1281951] libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1281952 [Bug 1281952] mingw-libxml2: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1281953 [Bug 1281953] mingw-libxml2: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode [epel-7]

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Qwe4F4o4oP&a=cc_unsubscribe

Red Hat Bugzilla

10:46 p.m.

New subject: [Bug 1281950] libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

--- Comment #2 from Adam Mariš amaris@redhat.com ---

Created mingw-libxml2 tracking bugs for this issue:

Affects: fedora-all [bug 1281952] Affects: epel-7 [bug 1281953]

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=3KdSiXr1la&a=cc_unsubscribe

Red Hat Bugzilla

11:08 p.m.

New subject: [Bug 1281950] libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Adam Mariš amaris@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1281961

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sI5WL0GKMB&a=cc_unsubscribe

Red Hat Bugzilla

19 Nov 19 Nov

12:33 p.m.

New subject: [Bug 1281950] libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

--- Comment #3 from Adam Mariš amaris@redhat.com --- Acknowledgments:

Red Hat would like to thank GNOME project for reporting this issue. Upstream acknowledges Hugh Davenport as the original reporter.

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=vPvB7mIF6r&a=cc_unsubscribe

Red Hat Bugzilla

1:57 p.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Adam Mariš amaris@redhat.com changed:

--- Comment #4 from Adam Mariš amaris@redhat.com --- CVE assignment:

http://openwall.com/lists/oss-security/2015/11/18/23

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=8nSaRVMzjG&a=cc_unsubscribe

Red Hat Bugzilla

23 Nov 23 Nov

3:06 p.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

--- Comment #5 from Adam Mariš amaris@redhat.com --- Upstream patch:

https://git.gnome.org/browse/libxml2/commit/?id=8fb4a770075628d6441fb17a1e43...

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sQu0esPXnX&a=cc_unsubscribe

Red Hat Bugzilla

24 Nov 24 Nov

10:02 a.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1274223

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=dzdB5jVr6X&a=cc_unsubscribe

Red Hat Bugzilla

10:16 a.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1284794

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=SZLOxPqaiD&a=cc_unsubscribe

Red Hat Bugzilla

30 Nov 30 Nov

4:21 a.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=uSFSJQ1iK9&a=cc_unsubscribe

Red Hat Bugzilla

2 Dec 2 Dec

6:51 p.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Martin Cermak mcermak@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=oEbKDlWIke&a=cc_unsubscribe

Red Hat Bugzilla

7 Dec 7 Dec

11:15 a.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

--- Comment #11 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 6

Via RHSA-2015:2549 https://rhn.redhat.com/errata/RHSA-2015-2549.html

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=GJolZaf5NF&a=cc_unsubscribe

Red Hat Bugzilla

1:01 p.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

--- Comment #12 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 7

Via RHSA-2015:2550 https://rhn.redhat.com/errata/RHSA-2015-2550.html

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=fcfLoJ4Iu9&a=cc_unsubscribe

Red Hat Bugzilla

17 Feb 17 Feb

4:55 a.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950 Bug 1281950 depends on bug 1281952, which changed state.

Bug 1281952 Summary: mingw-libxml2: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1281952

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

24 Feb 24 Feb

6:58 p.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950 Bug 1281950 depends on bug 1281953, which changed state.

Bug 1281953 Summary: mingw-libxml2: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1281953

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

31 Mar 31 Mar

3:21 p.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Timothy Walsh twalsh@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

1 Apr 1 Apr

6:08 a.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

Timothy Walsh twalsh@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1323037

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

18 Apr 18 Apr

1:58 p.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

--- Doc Text *updated* by Timothy Walsh twalsh@redhat.com --- A stack-based buffer over-read vulnerability was found in libxml2 in the xmlSAX2TextNode function in SAX2.c that allows context-dependent attackers to cause a denial of service or obtain sensitive information via crafted XML data.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

2:10 p.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

--- Doc Text *updated* by Timothy Walsh twalsh@redhat.com --- A stack-based buffer over-read flaw was found in libxml2 in the xmlSAX2TextNode function in SAX2.c that allows context-dependent attackers to cause a denial of service or obtain sensitive information via crafted XML data.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

6 May 6 May

11:25 a.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

--- Doc Text *updated* by Martin Prpic mprpic@redhat.com --- A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

17 May 17 May

6:15 p.m.

New subject: [Bug 1281950] CVE-2015-8242 libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

https://bugzilla.redhat.com/show_bug.cgi?id=1281950

--- Comment #16 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Via RHSA-2016:1089 https://rhn.redhat.com/errata/RHSA-2016-1089.html

-- You are receiving this mail because: You are on the CC list for the bug.

3039

Age (days ago)

3225

Last active (days ago)

mingw@lists.fedoraproject.org

20 comments

1 participants

tags (0)

participants (1)

Red Hat Bugzilla