CVE-2018-9251

The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted…

published April 4, 2018

CVSS
—
EPSS
2%
Percentile
83.6
In the wild
Unconfirmed
What it is

The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02357 · 83.6th percentile
Published
2018-04-04T02:00Z
EPSS history
Timeline
  • 04 APR 02:00Z
    The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted…
    cvelistv5