CVE-2018-9251

Name of the Vulnerable Software and Affected Versions libxml2 version 2.9.8

Description The issue is related to the xz decomp function in libxml2, which can be exploited by remote attackers to cause a denial of service (infinite loop) via a crafted XML file, triggering LZMA MEMLIMIT ERROR. This can be demonstrated using xmllint.

Recommendations For libxml2 version 2.9.8, consider disabling the xz decomp function as a temporary workaround until a patch is available. Restrict access to crafted XML files to minimize the risk of exploitation.