CVE-2025-6170CWE-121

CVE-2025-6170

Low · published June 16, 2025

CVSS v3.1
2.5
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.

The record
Technical detail
CVSS v3.1
2.5 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-06-16T20:15Z
Affected products (8)
ProductVersionsFixed in
redhat/jboss_core_servicesall versions—
redhat/openshift_container_platformall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
xmlsoft/libxml2all versions—
References (82)
https://access.redhat.com/errata/RHSA-2026:74685 · [email protected]https://access.redhat.com/errata/RHSA-2026:7519 · [email protected]https://access.redhat.com/errata/RHSA-2026:75652 · [email protected]https://access.redhat.com/errata/RHSA-2026:75654 · [email protected]https://access.redhat.com/errata/RHSA-2026:75655 · [email protected]https://access.redhat.com/errata/RHSA-2026:75660 · [email protected]https://access.redhat.com/errata/RHSA-2026:76042 · [email protected]https://access.redhat.com/errata/RHSA-2026:79120 · [email protected]https://access.redhat.com/errata/RHSA-2026:79121 · [email protected]https://access.redhat.com/errata/RHSA-2026:80756 · [email protected]https://access.redhat.com/errata/RHSA-2026:81127 · [email protected]https://access.redhat.com/errata/RHSA-2026:82061 · [email protected]https://access.redhat.com/errata/RHSA-2026:82066 · [email protected]https://access.redhat.com/errata/RHSA-2026:82354 · [email protected]https://access.redhat.com/errata/RHSA-2026:82368 · [email protected]https://access.redhat.com/errata/RHSA-2026:82371 · [email protected]https://access.redhat.com/errata/RHSA-2026:82857 · [email protected]https://access.redhat.com/errata/RHSA-2026:82888 · [email protected]https://gitlab.gnome.org/GNOME/libxml2/-/issues/941 · [email protected]https://access.redhat.com/errata/RHSA-2026:74679 · [email protected]https://access.redhat.com/errata/RHSA-2026:74681 · [email protected]https://access.redhat.com/errata/RHSA-2026:74683 · [email protected]https://access.redhat.com/errata/RHSA-2026:74687 · [email protected]https://access.redhat.com/errata/RHSA-2026:74688 · [email protected]https://access.redhat.com/errata/RHSA-2026:74771 · [email protected]https://access.redhat.com/errata/RHSA-2026:75657 · [email protected]https://access.redhat.com/errata/RHSA-2026:75658 · [email protected]https://access.redhat.com/errata/RHSA-2026:75659 · [email protected]https://access.redhat.com/errata/RHSA-2026:79118 · [email protected]https://access.redhat.com/errata/RHSA-2026:79119 · [email protected]https://access.redhat.com/errata/RHSA-2026:82059 · [email protected]https://access.redhat.com/errata/RHSA-2026:82304 · [email protected]https://access.redhat.com/errata/RHSA-2026:82322 · [email protected]https://access.redhat.com/errata/RHSA-2026:82336 · [email protected]https://access.redhat.com/errata/RHSA-2026:82347 · [email protected]https://access.redhat.com/errata/RHSA-2026:82372 · [email protected]https://access.redhat.com/errata/RHSA-2026:82415 · [email protected]https://access.redhat.com/security/cve/CVE-2025-6170 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2372952 · [email protected]https://access.redhat.com/errata/RHSA-2026:36734 · [email protected]https://access.redhat.com/errata/RHSA-2026:39304 · [email protected]https://access.redhat.com/errata/RHSA-2026:39317 · [email protected]https://access.redhat.com/errata/RHSA-2026:44481 · [email protected]https://access.redhat.com/errata/RHSA-2026:46836 · [email protected]https://access.redhat.com/errata/RHSA-2026:53371 · [email protected]https://access.redhat.com/errata/RHSA-2026:58981 · [email protected]https://access.redhat.com/errata/RHSA-2026:70596 · [email protected]https://access.redhat.com/errata/RHSA-2026:70639 · [email protected]https://access.redhat.com/errata/RHSA-2026:72394 · [email protected]https://access.redhat.com/errata/RHSA-2026:72395 · [email protected]https://access.redhat.com/errata/RHSA-2026:72399 · [email protected]https://access.redhat.com/errata/RHSA-2026:72470 · [email protected]https://access.redhat.com/errata/RHSA-2026:72475 · [email protected]https://access.redhat.com/errata/RHSA-2026:72476 · [email protected]https://access.redhat.com/errata/RHSA-2026:72502 · [email protected]https://access.redhat.com/errata/RHSA-2026:73859 · [email protected]https://access.redhat.com/errata/RHSA-2026:73909 · [email protected]https://access.redhat.com/errata/RHSA-2026:73929 · [email protected]https://access.redhat.com/errata/RHSA-2026:73930 · [email protected]https://access.redhat.com/errata/RHSA-2026:73959 · [email protected]https://access.redhat.com/errata/RHSA-2026:73960 · [email protected]https://access.redhat.com/errata/RHSA-2026:73961 · [email protected]https://access.redhat.com/errata/RHSA-2026:73962 · [email protected]https://access.redhat.com/errata/RHSA-2026:74359 · [email protected]https://access.redhat.com/errata/RHSA-2026:74360 · [email protected]https://access.redhat.com/errata/RHSA-2026:74361 · [email protected]https://access.redhat.com/errata/RHSA-2026:74362 · [email protected]https://access.redhat.com/errata/RHSA-2026:74363 · [email protected]https://access.redhat.com/errata/RHSA-2026:74364 · [email protected]https://access.redhat.com/errata/RHSA-2026:74365 · [email protected]https://access.redhat.com/errata/RHSA-2026:74450 · [email protected]https://access.redhat.com/errata/RHSA-2026:74458 · [email protected]https://access.redhat.com/errata/RHSA-2026:74459 · [email protected]https://access.redhat.com/errata/RHSA-2026:74460 · [email protected]https://access.redhat.com/errata/RHSA-2026:74461 · [email protected]https://access.redhat.com/errata/RHSA-2026:74462 · [email protected]https://access.redhat.com/errata/RHSA-2026:74463 · [email protected]https://access.redhat.com/errata/RHSA-2026:74674 · [email protected]https://access.redhat.com/errata/RHSA-2026:74677 · [email protected]https://access.redhat.com/errata/RHSA-2026:74678 · [email protected]https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-253495.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 16 JUN 15:24Z
    Libxml2: stack buffer overflow in xmllint interactive shell command handling
    cvelistv5