QID 198697

Date Published: 2022-03-15

QID 198697: Ubuntu Security Notification for libxml2 Vulnerability (USN-5324-1)

Libxml2 incorrectly handled certain xml files.

Anattacker could use this issue to cause libxml2 to crash, resulting in adenial of service, or possibly execute arbitrary code.

  • CVSS V3 rated as High - 7.5 severity.
  • CVSS V2 rated as Medium - 4.3 severity.
  • Solution
    Refer to Ubuntu security advisory USN-5324-1 for updates and patch information.
    Vendor References

    CVEs related to QID 198697

    Software Advisories
    Advisory ID Software Component Link
    USN-5324-1 Ubuntu Linux URL Logo ubuntu.com/security/notices/USN-5324-1