Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-49796

Libxml: type confusion leads to denial of service (dos)

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 2.15.0
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • libxml2

    fixed in 2.15.0

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • libxml2

    Version range not reported

  • openshift/ose-rhel-coreos-8

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • web-terminal/web-terminal-rhel9-operator

    Version range not reported

  • web-terminal/web-terminal-tooling-rhel9

    Version range not reported

  • web-terminal/web-terminal-tooling-rhel9

    Version range not reported

  • openshift-serverless-1/logic-data-index-ephemeral-rhel8

    Version range not reported

  • openshift-serverless-1/logic-data-index-postgresql-rhel8

    Version range not reported

  • openshift-serverless-1/logic-db-migrator-tool-rhel8

    Version range not reported

  • openshift-serverless-1/logic-jobs-service-ephemeral-rhel8

    Version range not reported

  • openshift-serverless-1/logic-jobs-service-postgresql-rhel8

    Version range not reported

  • openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8

    Version range not reported

  • openshift-serverless-1/logic-management-console-rhel8

    Version range not reported

  • openshift-serverless-1/logic-operator-bundle

    Version range not reported

  • openshift-serverless-1/logic-rhel8-operator

    Version range not reported

  • openshift-serverless-1/logic-swf-builder-rhel8

    Version range not reported

  • openshift-serverless-1/logic-swf-devmode-rhel8

    Version range not reported

  • cert-manager/jetstack-cert-manager-rhel9

    Version range not reported

  • compliance/openshift-file-integrity-rhel8-operator

    Version range not reported

  • discovery/discovery-server-rhel9

    Version range not reported

  • libxml2-main

    Version range not reported

  • insights-proxy/insights-proxy-container-rhel9

    Version range not reported

  • libxml2

    Version range not reported

References 25

access.redhat.com