CVE-2017-5969

libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.

CVSS v3 4.7 MEDIUM
CVSS v2.0 2.6 LOW

4.7^/10

CVSS v3 : MEDIUM

Vector : AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

2.6^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:H/Au:N/C:N/I:N/A:P

Exploitability : 4.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.openwall.com/lists/oss-security/2016/11/05/3	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/13/1	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/96188	Third Party Advisory VDB Entry
https://bugzilla.gnome.org/show_bug.cgi?id=778519	Issue Tracking Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html
https://security.gentoo.org/glsa/201711-01

Configurations

Configuration 1 (hide)

cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-04-11 16:59

Updated : 2024-05-17 01:19

NVD link : CVE-2017-5969

Mitre link : CVE-2017-5969

CVE.ORG link : CVE-2017-5969

JSON object : View

Products Affected

xmlsoft

libxml2

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2017-5969", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.0}]}, "published": "2017-04-11T16:59:00.343", "references": [{"url": "http://www.openwall.com/lists/oss-security/2016/11/05/3", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2017/02/13/1", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/96188", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.gnome.org/show_bug.cgi?id=778519", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html", "source": "cve@mitre.org"}, {"url": "https://security.gentoo.org/glsa/201711-01", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states \"I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser."}, {"lang": "es", "value": "** DISPUTADO ** libxml2 2.9.4, cuando se utiliza en el modo de recuperaci\u00f3n, permite a los atacantes remotos provocar una denegaci\u00f3n de servicio (referencia de puntero NULL) por medio de un documento XML manipulado. NOTA: El mantenedor declara que \"no estar\u00eda de acuerdo con un CVE con la opci\u00f3n de an\u00e1lisis de recuperaci\u00f3n que s\u00f3lo deber\u00eda utilizarse para la recuperaci\u00f3n manual al menos para el analizador de XML\"."}], "lastModified": "2024-05-17T01:19:05.497", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "430C1FDF-1239-4FF2-B5A4-8CED209B8036"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}