Memory corruption in Libxml2 - CVE-2017-18258

Vulnerability identifier: #VU15363

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-18258

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists in the xz_head() function of the GNOME libxml2 library, as defined in the xzlib.c source code due to boundary error in the Lempel-Ziv-Markov (LZMA) decompression feature. A remote unauthenticated attacker can trick the victim into opening a specially crafted LZMA file that submits malicious input, trigger memory corruption and cause the application to crash.

Libxml2
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Opensuse
libxml2 (Red Hat package)
IBM Cloud Transformation Advisor
Data Computing Appliance (DCA)

Update to version 2.9.6.

Libxml2 - update to 2.9.6
libxml2 (Red Hat package) - update to 2.9.1-6.el7.4
IBM Cloud Transformation Advisor - update to 3.5.0
Data Computing Appliance (DCA) - update to 4.3.0.0

• https://gitlab.gnome.org/GNOME/libxml2/commit/e2a9122b8dde53d320750451e9907a7dcb2ca8bb

• OpenSUSE Linux update for libxml2
• Amazon Linux AMI update for libxml2
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Red Hat Enterprise Linux 7 update for libxml2
• Multiple vulnerabilities in IBM Cloud Transformation Advisor