Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libxml2 安全漏洞
Vulnerability Description
libxml2是GNOME项目组所研发的一个基于C语言的用来解析XML文档的函数库，它支持多种编码格式、Xpath解析、Well-formed和valid验证等。 libxml2 2.9.8版本中的xzlib.c文件的‘xz_decomp’函数存在安全漏洞。远程攻击者可借助特制的XML文件利用该漏洞造成拒绝服务（无限循环）。
CVSS Information
N/A
Vulnerability Type
N/A