Infinite loop in Libxml2 - CVE-2018-14567

Vulnerability identifier: #VU14470

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-14567

CWE-ID: CWE-611

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists in the liblzma error code of the GNOME libxml2 library due to an infinite loop condition in the Lempel–Ziv–Markov (LZMA) decompression feature during the processing of XML files. A remote attacker can trick the victim into opening an XML file that submits malicious input, trigger a LZMA_MEMLIMIT_ERROR condition and cause the service to crash.

Libxml2
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Opensuse
libxml2 (Alpine package)
libxml2 (Red Hat package)
Data Computing Appliance (DCA)

Install update from vendor's website.

libxml2 (Alpine package) - update to 2.9.8-r1
libxml2 (Red Hat package) - update to 2.9.1-6.el7.4
Data Computing Appliance (DCA) - update to 4.3.0.0

• https://gitlab.gnome.org/GNOME/libxml2/commit/2240fbf5912054af025fb6e01e26375100275e74

• Denial of service in GNOME libxml2
• OpenSUSE Linux update for libxml2
• OpenSUSE Linux update for libxml2
• Amazon Linux AMI update for libxml2
• Infinite loop in libxml2 (Alpine package)
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Red Hat Enterprise Linux 7 update for libxml2