Libxml2: stack buffer overflow in xmllint interactive shell command handling
Summary
| CVE | CVE-2025-6170 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2025-06-16 16:15:20 UTC |
| Updated | 2026-10-01 18:17:11 UTC |
| Description | A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections. |
Risk And Classification
Primary CVSS: v3.1 2.5 LOW from [email protected]
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
EPSS: 0.003230000 probability, percentile 0.229820000 (date 2026-10-01)
Problem Types: CWE-121 | CWE-121 Stack-based Buffer Overflow
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 2.5 | LOW | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L |
| 3.1 | [email protected] | Secondary | 2.5 | LOW | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L |
| 3.1 | CNA | CVSS | 2.5 | LOW | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
HighPrivileges Required
NoneUser Interaction
RequiredScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
LowCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Redhat | Enterprise Linux | 10.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 6.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 7.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 8.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 9.0 | All | All | All |
| Application | Redhat | Jboss Core Services | - | All | All | All |
| Application | Redhat | Openshift Container Platform | 4.0 | All | All | All |
| Application | Xmlsoft | Libxml2 | - | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Red Hat | Red Hat Enterprise Linux 10 | unaffected 0:2.12.5-10.el10_2.2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | unaffected 0:2.12.5-9.el10_0.2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:2.9.7-21.el8_10.6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:2.9.7-21.el8_10.6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:2.9.13-14.el9_8.2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:2.9.13-14.el9_8.2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | unaffected 0:2.9.13-12.el9_6.3 * rpm | Not specified |
| CNA | Red Hat | Cert Manager Support For Red Hat OpenShift Release 1.20 | unaffected 1790223279 * rpm | Not specified |
| CNA | Red Hat | Cert Manager Support For Red Hat OpenShift Release 1.20 | unaffected 1790223719 * rpm | Not specified |
| CNA | Red Hat | Cert Manager Support For Red Hat OpenShift Release 1.20 | unaffected 1790272426 * rpm | Not specified |
| CNA | Red Hat | Cert Manager Support For Red Hat OpenShift Release 1.20 | unaffected 1790589998 * rpm | Not specified |
| CNA | Red Hat | Cert Manager Support For Red Hat OpenShift Release 1.20 | unaffected 1790589912 * rpm | Not specified |
| CNA | Red Hat | Cert Manager Support For Red Hat OpenShift Release 1.20 | unaffected 1790589914 * rpm | Not specified |
| CNA | Red Hat | Cert Manager Support For Red Hat OpenShift Release 1.20 | unaffected 1790589855 * rpm | Not specified |
| CNA | Red Hat | Cert Manager Support For Red Hat OpenShift Release 1.20 | unaffected 1790598593 * rpm | Not specified |
| CNA | Red Hat | Red Hat AI Inference Server 3.2 | unaffected 1790621714 * rpm | Not specified |
| CNA | Red Hat | Red Hat AI Inference Server 3.2 | unaffected 1790621718 * rpm | Not specified |
| CNA | Red Hat | Red Hat AI Inference Server 3.2 | unaffected 1790621713 * rpm | Not specified |
| CNA | Red Hat | Red Hat Discovery 2 | unaffected 1784821670 * rpm | Not specified |
| CNA | Red Hat | Red Hat Discovery 2 | unaffected 1784821750 * rpm | Not specified |
| CNA | Red Hat | Red Hat Hardened Images | unaffected 2.15.2-0.3.hum1 * rpm | Not specified |
| CNA | Red Hat | Red Hat Insights Proxy 1.5 | unaffected 1786433656 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.0 | unaffected 1790276886 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.0 | unaffected 1790276884 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.0 | unaffected 1790277045 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.0 | unaffected 1790276889 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.0 | unaffected 1790276974 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.2 | unaffected 1790703497 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.2 | unaffected 1790703506 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.2 | unaffected 1790703590 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.2 | unaffected 1790703568 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.2 | unaffected 1790703586 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.2 | unaffected 1790703494 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.3 | unaffected 1790703615 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.3 | unaffected 1790703516 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.3 | unaffected 1790703524 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.3 | unaffected 1790703601 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.3 | unaffected 1790703516 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.3 | unaffected 1790703608 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.3 | unaffected 1790703579 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift AI 3.3 | unaffected 1790703516 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1784794818 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1784794778 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1784795112 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1784794289 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1784795076 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1787241211 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1787135742 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1787241260 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 6 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat JBoss Core Services | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Siemens | RUGGEDCOM RST2428P | affected V4.0 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| access.redhat.com/errata/RHSA-2026:7519 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:73859 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74363 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:72399 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:70639 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:72395 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74450 | [email protected] | access.redhat.com | |
| bugzilla.redhat.com/show_bug.cgi | [email protected] | bugzilla.redhat.com | Issue Tracking, Third Party Advisory |
| access.redhat.com/errata/RHSA-2026:74362 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:36734 | [email protected] | access.redhat.com | |
| lists.debian.org/debian-lts-announce/2025/07/msg00014.html | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | |
| access.redhat.com/errata/RHSA-2026:72394 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:72470 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:39304 | [email protected] | access.redhat.com | |
| access.redhat.com/security/cve/CVE-2025-6170 | [email protected] | access.redhat.com | Mitigation, Third Party Advisory |
| access.redhat.com/errata/RHSA-2026:44481 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74361 | [email protected] | access.redhat.com | |
| gitlab.gnome.org/GNOME/libxml2/-/issues/941 | [email protected] | gitlab.gnome.org | |
| access.redhat.com/errata/RHSA-2026:74359 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74360 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:58981 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74460 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:73929 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74459 | [email protected] | access.redhat.com | |
| cert-portal.siemens.com/productcert/html/ssa-253495.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| access.redhat.com/errata/RHSA-2026:73961 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:46836 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:70596 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:73959 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:72475 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74461 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:73960 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74458 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74364 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53371 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:73930 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:73909 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74462 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:72476 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:73962 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:72502 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74365 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:74463 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:39317 | [email protected] | access.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Red Hat would like to thank Ahmed Lekssays for reporting this issue. (en)
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2025-06-16T05:33:22.955Z | Reported to Red Hat. |
| CNA | 2025-06-16T00:00:00.000Z | Made public. |
Workarounds
CNA: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to a widespread installation base, or stability. It is strongly recommended to apply the upstream patch once available.
There are currently no legacy QID mappings associated with this CVE.