CVE-2024-34459

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.11.8 libxml2 versions 2.12.x prior to 2.12.7

Description An issue was discovered in xmllint, which is part of libxml2. The problem arises when formatting error messages with xmllint --htmlout, resulting in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c. This can potentially lead to a denial of service.

Recommendations For libxml2 versions prior to 2.11.8, update to version 2.11.8 or later. For libxml2 versions 2.12.x prior to 2.12.7, update to version 2.12.7 or later. As a temporary workaround, consider avoiding the use of xmllint --htmlout until a patch is applied.