[Bug 1281936] New: libxml2: Buffer overread with XML parser in xmlNextChar

List overview All Threads
Download

newer

older

[Bug 1281950] New: libxml2: Buffer...

[Bug 1281930] New: libxml2:...

Red Hat Bugzilla

13 Nov 2015 13 Nov '15

8:59 p.m.

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Bug ID: 1281936 Summary: libxml2: Buffer overread with XML parser in xmlNextChar Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: athmanem@gmail.com, c.david86@gmail.com, erik-fedora@vanpienbroek.nl, fedora-mingw@lists.fedoraproject.org, ktietz@redhat.com, lfarkas@lfarkas.org, ohudlick@redhat.com, rjones@redhat.com, veillard@redhat.com

A buffer overread in xmlNextChar was found, causing segmentation fault when compiled with ASAN.

Upstream bug (contains reproducer):

https://bugzilla.gnome.org/show_bug.cgi?id=756263

Upstream patch:

https://git.gnome.org/browse/libxml2/commit/?id=ab2b9a93ff19cedde7befbf2fcc4...

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=AuaeY9x6SN&a=cc_unsubscribe

Show replies by date

Red Hat Bugzilla

13 Nov 13 Nov

9 p.m.

New subject: [Bug 1281936] libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Adam Mariš amaris@redhat.com changed:

--- Comment #1 from Adam Mariš amaris@redhat.com ---

Created libxml2 tracking bugs for this issue:

Affects: fedora-all [bug 1281937]

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1281937 [Bug 1281937] libxml2: Buffer overread with XML parser in xmlNextChar [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1281938 [Bug 1281938] mingw-libxml2: libxml2: Buffer overread with XML parser in xmlNextChar [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1281939 [Bug 1281939] mingw-libxml2: libxml2: Buffer overread with XML parser in xmlNextChar [epel-7]

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=qAOxjZOARo&a=cc_unsubscribe

Red Hat Bugzilla

9 p.m.

New subject: [Bug 1281936] libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

--- Comment #2 from Adam Mariš amaris@redhat.com ---

Created mingw-libxml2 tracking bugs for this issue:

Affects: fedora-all [bug 1281938] Affects: epel-7 [bug 1281939]

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=wUqBfqC2MA&a=cc_unsubscribe

Red Hat Bugzilla

10:08 p.m.

New subject: [Bug 1281936] libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Adam Mariš amaris@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1281961

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=r1ZkG8guHL&a=cc_unsubscribe

Red Hat Bugzilla

19 Nov 19 Nov

11:28 a.m.

New subject: [Bug 1281936] libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

--- Comment #3 from Adam Mariš amaris@redhat.com --- Acknowledgments:

Red Hat would like to thank GNOME project for reporting this issue. Upstream acknowledges Hugh Davenport as the original reporter.

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=mrwBZi1Sqh&a=cc_unsubscribe

Red Hat Bugzilla

12:58 p.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Adam Mariš amaris@redhat.com changed:

--- Comment #4 from Adam Mariš amaris@redhat.com --- CVE assignment:

http://openwall.com/lists/oss-security/2015/11/18/23

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sfiNc9tsw8&a=cc_unsubscribe

Red Hat Bugzilla

24 Nov 24 Nov

9:02 a.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1274223

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ikCekFwXZv&a=cc_unsubscribe

Red Hat Bugzilla

9:15 a.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1284794

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=gpumSo6yFa&a=cc_unsubscribe

Red Hat Bugzilla

30 Nov 30 Nov

3:21 a.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=5z9mofkM05&a=cc_unsubscribe

Red Hat Bugzilla

2 Dec 2 Dec

5:34 p.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Martin Cermak mcermak@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- CC| |mcermak@redhat.com

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=xAEBDQnGWL&a=cc_unsubscribe

Red Hat Bugzilla

7 Dec 7 Dec

10:14 a.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

--- Comment #8 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 6

Via RHSA-2015:2549 https://rhn.redhat.com/errata/RHSA-2015-2549.html

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=dZO21hG7jl&a=cc_unsubscribe

Red Hat Bugzilla

12:01 p.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

--- Comment #9 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 7

Via RHSA-2015:2550 https://rhn.redhat.com/errata/RHSA-2015-2550.html

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=UrfpFkGKek&a=cc_unsubscribe

Red Hat Bugzilla

31 Mar 31 Mar

2:19 p.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Timothy Walsh twalsh@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

1 Apr 1 Apr

5:06 a.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

Timothy Walsh twalsh@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1323035

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

18 Apr 18 Apr

12:43 p.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

--- Doc Text *updated* by Timothy Walsh twalsh@redhat.com --- A buffer over-read vulnerability was found in libxml2 in xmlNextChar causing segmentation fault when compiled with ASAN.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

1:09 p.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

--- Doc Text *updated* by Timothy Walsh twalsh@redhat.com --- A buffer over-read flaw was found in libxml2 in xmlNextChar causing segmentation fault when compiled with ASAN.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

22 Apr 22 Apr

7:34 a.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

--- Doc Text *updated* by Timothy Walsh twalsh@redhat.com --- A heap-based buffer over-read flaw was found libxml2. The xmlNextChar function in libxml2 does not properly check the state, which allows context-dependent attackers to cause an application crash and denial of service or obtain sensitive information via crafted XML data.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

6 May 6 May

10:24 a.m.

New subject: [Bug 1281936] CVE-2015-8241 libxml2: Buffer overread with XML parser in xmlNextChar

https://bugzilla.redhat.com/show_bug.cgi?id=1281936

--- Doc Text *updated* by Martin Prpic mprpic@redhat.com --- A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.

-- You are receiving this mail because: You are on the CC list for the bug.