CVE-2026-0992— Libxml2: libxml2: denial of service via crafted xml catalogs
Quick assessment
Affected
Red Hat Red Hat Hardened Images
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
libxml2是GNOME开源的一个用来解析XML文档的函数库。它用C语言写成，并且能为多种语言所调用，例如C语言，C++，XSH。 libxml2存在资源管理错误漏洞，该漏洞源于处理包含重复指向相同下游目录的<nextCatalog>元素的XML目录时出现不受控制的资源消耗，可能导致远程攻击者通过提供特制目录造成过度CPU消耗和应用程序可用性降低。
Possible ATT&CK Techniques 1 AI
T1496 · Resource HijackingAffected Version Matrix 9
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 6 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 7 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 8 | any |
affected |
| Red Hat | Red Hat Enterprise Linux 9 | any |
affected |
| Red Hat | Red Hat Hardened Images | 2.15.2-0.3.hum1< * |
unaffected |
| Red Hat | Red Hat JBoss Core Services | any |
affected |
| Red Hat | Red Hat OpenShift Container Platform 4 | any |
affected |
any |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-0992
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Libxml2: libxml2: denial of service via crafted xml catalogs
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Vulnerability Title
libxml2 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
libxml2是GNOME开源的一个用来解析XML文档的函数库。它用C语言写成，并且能为多种语言所调用，例如C语言，C++，XSH。 libxml2存在资源管理错误漏洞，该漏洞源于处理包含重复指向相同下游目录的<nextCatalog>元素的XML目录时出现不受控制的资源消耗，可能导致远程攻击者通过提供特制目录造成过度CPU消耗和应用程序可用性降低。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Hardened Images | 2.15.2-0.3.hum1 ~ * |
cpe:/a:redhat:hummingbird:1
|
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 6 | - |
cpe:/o:redhat:enterprise_linux:6
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
| Red Hat | Red Hat JBoss Core Services | - |
cpe:/a:redhat:jboss_core_services:1
|
|
| Red Hat | Red Hat OpenShift Container Platform 4 | - |
cpe:/a:redhat:openshift:4
|
|
| Red Hat | Red Hat OpenShift Container Platform 4 | - |
cpe:/a:redhat:openshift:4
|
|
II. Public POCs for CVE-2026-0992
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-0992
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-0992 (2)
Same Patch Batch · Red Hat · 2026-01-15 · 4 CVEs total
| CVE-2026-0990 | 5.9 MEDIUM | Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing |
| CVE-2026-0976 | 3.7 LOW | Org.keycloak/keycloak-quarkus-server: keycloak: proxy bypass due to improper handling of m |
| CVE-2026-0989 | 3.7 LOW | Libxml2: unbounded relaxng include recursion leading to stack overflow |
IV. Related Vulnerabilities
Same product: Red Hat Hardened Images
-
CVE-2026-110927
Openssh: openssh: a compressed payload can expand past the m -
CVE-2026-110926
Openssh: openssh: shared lz77 compression dictionary leaks p -
CVE-2026-110925
Openssh: openssh: '$' and '\' in a command-line username exp -
CVE-2026-110923
Openssh: openssh: sftp can write outside the destination dir -
CVE-2026-88842
Busybox: busybox: dpkg stale field_start pointer causes out-
Same vendor: Red Hat
-
CVE-2026-89096
Nfs-utils: nfs-utils: denial of service via memory leak in r -
CVE-2026-89088
Parted: parted: denial of service via heap buffer overflow d -
CVE-2026-89085
Parted: parted: heap-based buffer overflow via crafted fat32 -
CVE-2026-111802
Nautilus: nautilus: arbitrary file deletion via trash symlin -
CVE-2026-17591
Libarchive: libarchive: use-after-free via aliased mac metad
Same weakness: CWE-400
-
CVE-2026-68498
jackson-core: Delayed maxNameLength enforcement for char-bac -
CVE-2026-77474
dcg: Exponential-time command-substitution preprocessing let -
CVE-2026-77630
pupnp: Denial of service via blocking DNS resolution in pars -
CVE-2026-111378
FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustio -
CVE-2026-111377
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Cha
V. Comments for CVE-2026-0992
No comments yet