search

NixOS / nixpkgs

Nix Packages collection & NixOS
MIT License
17.48k stars 13.66k forks source link

Vulnerability roundup 114: libxslt-1.1.35: 1 advisory [6.5] #172499

Closed ckauhaus closed 2 years ago

ckauhaus commented 2 years ago

search, files

CVE details

CVE-2022-29824

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.

Scanned versions: nixos-unstable: f419dc5763c.

Cc @edolstra Cc @jtojnar

SuperSandro2000 commented 2 years ago

This is fixed in libxml2 2.9.13 and we are already on 2.9.14 on nixos-unstable.