The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Leap | Opensuse | 42.1 (including) | 42.1 (including) |
| Red Hat Enterprise Linux 6 | RedHat | libxml2-0:2.7.6-21.el6_8.1 | * |
| Red Hat Enterprise Linux 7 | RedHat | libxml2-0:2.9.1-6.el7_2.3 | * |
| Red Hat JBoss Core Services 1 | RedHat | * | |
| Libxml2 | Ubuntu | precise | * |
| Libxml2 | Ubuntu | trusty | * |
| Libxml2 | Ubuntu | upstream | * |
| Libxml2 | Ubuntu | vivid/stable-phone-overlay | * |
| Libxml2 | Ubuntu | wily | * |
| Libxml2 | Ubuntu | xenial | * |