CVE-2018-20592

In Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted xml file, as demonstrated by mxmldoc.

Weakness

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory “belongs” to the code that operates on the new pointer.

Affected Software

Name	Vendor	Start Version	End Version
Mini-xml	Msweet	2.12 (including)	2.12 (including)
Mxml	Ubuntu	bionic	*
Mxml	Ubuntu	cosmic	*
Mxml	Ubuntu	disco	*
Mxml	Ubuntu	eoan	*
Mxml	Ubuntu	focal	*
Mxml	Ubuntu	groovy	*
Mxml	Ubuntu	hirsute	*
Mxml	Ubuntu	impish	*
Mxml	Ubuntu	kinetic	*
Mxml	Ubuntu	lunar	*
Mxml	Ubuntu	mantic	*
Mxml	Ubuntu	oracular	*
Mxml	Ubuntu	plucky	*
Mxml	Ubuntu	trusty	*
Mxml	Ubuntu	xenial	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-20592
CWE	https://cwe.mitre.org/data/definitions/416.html

Use After Free

Weakness

Affected Software

Potential Mitigations

References