Description
A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.
References (9)
Core 9
Core References
Mailing List mailing-list
x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html
Vendor Advisory x_refsource_misc
https://gitlab.gnome.org/GNOME/libxml2/issues/10
Third Party Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/3739-1/
Mailing List, Third Party Advisory x_refsource_misc
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901817
Third Party Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/3739-2/
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1595985
Vendor Advisory vendor-advisory
x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:1543
Vendor Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190719-0002/
Mailing List mailing-list
x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html
Scores
CVSS v3
6.5
EPSS
0.2001
EPSS Percentile
95.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Products (7)
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
16.04
canonical/ubuntu_linux
18.04
debian/debian_linux
rubygems/nokogiri
0 - 1.8.5RubyGems
xmlsoft/libxml2
< 2.9.8
Published
Jul 19, 2018
Tracked Since
Feb 18, 2026