Description (CNA)
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 before 2.14.5 |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected 0:2.12.5-10.el10_2.2 before * |
| Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support | unaffected 0:2.12.5-9.el10_0.2 before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 0:2.9.7-21.el8_10.6 before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 0:2.9.7-21.el8_10.6 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | unaffected 0:2.9.7-13.el8_6.15 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | unaffected 0:2.9.7-13.el8_6.15 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service | unaffected 0:2.9.7-16.el8_8.15 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | unaffected 0:2.9.7-16.el8_8.15 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:2.9.13-14.el9_8.2 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:2.9.13-14.el9_8.2 before * |
| Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | unaffected 0:2.9.13-3.el9_2.12 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | unaffected 0:2.9.13-13.el9_4.2 before * |
| Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support | unaffected 0:2.9.13-12.el9_6.3 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 | unaffected 1791371080 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 | unaffected 1791371069 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 | unaffected 1791788287 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 | unaffected 1791378395 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 | unaffected 1791970484 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 | unaffected 1791459707 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 | unaffected 1791459711 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 | unaffected 1791459759 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 | unaffected 1789029076 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 | unaffected 1791966259 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 | unaffected 1790223279 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 | unaffected 1790223719 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 | unaffected 1790272426 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 | unaffected 1790589998 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 | unaffected 1790589912 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 | unaffected 1790589914 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 | unaffected 1790589855 before * |
| Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 | unaffected 1790598593 before * |
| Red Hat / Red Hat AI Inference Server 3.2 | unaffected 1790621714 before * |
| Red Hat / Red Hat AI Inference Server 3.2 | unaffected 1790621718 before * |
| Red Hat / Red Hat AI Inference Server 3.2 | unaffected 1790621713 before * |
| Red Hat / Red Hat AI Inference Server 3.5 | unaffected 1791425869 before * |
| Red Hat / Red Hat AI Inference Server 3.5 | unaffected 1791427182 before * |
| Red Hat / Red Hat AI Inference Server 3.5 | unaffected 1791803821 before * |
| Red Hat / Red Hat AI Inference Server 3.5 | unaffected 1791473631 before * |
| Red Hat / Red Hat AI Inference Server 3.5 | unaffected 1791818357 before * |
| Red Hat / Red Hat AI Inference Server 3.5 | unaffected 1791473614 before * |
| Red Hat / Red Hat Discovery 2 | unaffected 1784821670 before * |
| Red Hat / Red Hat Discovery 2 | unaffected 1784821750 before * |
| Red Hat / Red Hat Hardened Images | unaffected 2.15.2-0.3.hum1 before * |
| Red Hat / Red Hat Insights proxy 1.5 | unaffected 1786433656 before * |
| Red Hat / Red Hat OpenShift AI 3.0 | unaffected 1790276886 before * |
| Red Hat / Red Hat OpenShift AI 3.0 | unaffected 1790276884 before * |
| Red Hat / Red Hat OpenShift AI 3.0 | unaffected 1790277045 before * |
| Red Hat / Red Hat OpenShift AI 3.0 | unaffected 1790276889 before * |
| Red Hat / Red Hat OpenShift AI 3.0 | unaffected 1790276974 before * |
| Red Hat / Red Hat OpenShift AI 3.2 | unaffected 1790703497 before * |
| Red Hat / Red Hat OpenShift AI 3.2 | unaffected 1790703506 before * |
| Red Hat / Red Hat OpenShift AI 3.2 | unaffected 1790703590 before * |
| Red Hat / Red Hat OpenShift AI 3.2 | unaffected 1790703568 before * |
| Red Hat / Red Hat OpenShift AI 3.2 | unaffected 1790703586 before * |
| Red Hat / Red Hat OpenShift AI 3.2 | unaffected 1790703494 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1790703615 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1790703516 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1790703524 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1790703601 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1790703516 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1790703608 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1790703579 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1790703516 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1791231820 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1791232257 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703542 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703539 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703553 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703631 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703597 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703641 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703630 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703541 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1790703545 before * |
| Red Hat / Red Hat OpenShift AI 3.5 | unaffected 1790703552 before * |
| Red Hat / Red Hat OpenShift AI 3.5 | unaffected 1790703656 before * |
| Red Hat / Red Hat OpenShift AI 3.5 | unaffected 1790703557 before * |
| Red Hat / Red Hat OpenShift AI 3.5 | unaffected 1790703707 before * |
| Red Hat / Red Hat OpenShift AI 3.5 | unaffected 1790703645 before * |
| Red Hat / Red Hat OpenShift AI 3.5 | unaffected 1790703554 before * |
| Red Hat / Red Hat OpenShift AI 3.5 | unaffected 1790703554 before * |
| Red Hat / Red Hat OpenShift AI 3.5 | unaffected 1790703630 before * |
| Red Hat / Red Hat OpenShift AI 3.5 | unaffected 1790703706 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1784794818 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1784794778 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1784795112 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1784794289 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1784795076 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1787241211 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1787135742 before * |
| Red Hat / Red Hat Update Infrastructure 5 | unaffected 1787241260 before * |
| Red Hat / Red Hat Enterprise Linux 6 | unknown |
| Red Hat / Red Hat Enterprise Linux 7 | unknown |
| Red Hat / Red Hat JBoss Core Services | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
CWE
CWE-121
References
- https://access.redhat.com/errata/RHSA-2026:36734
- https://access.redhat.com/errata/RHSA-2026:39304
- https://access.redhat.com/errata/RHSA-2026:39317
- https://access.redhat.com/errata/RHSA-2026:44481
- https://access.redhat.com/errata/RHSA-2026:46836
- https://access.redhat.com/errata/RHSA-2026:53371
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:70596
- https://access.redhat.com/errata/RHSA-2026:70639
- https://access.redhat.com/errata/RHSA-2026:72394
- https://access.redhat.com/errata/RHSA-2026:72395
- https://access.redhat.com/errata/RHSA-2026:72399
- https://access.redhat.com/errata/RHSA-2026:72470
- https://access.redhat.com/errata/RHSA-2026:72475
- https://access.redhat.com/errata/RHSA-2026:72476
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:73859
- https://access.redhat.com/errata/RHSA-2026:73909
- https://access.redhat.com/errata/RHSA-2026:73929
- https://access.redhat.com/errata/RHSA-2026:73930
- https://access.redhat.com/errata/RHSA-2026:73959
- https://access.redhat.com/errata/RHSA-2026:73960
- https://access.redhat.com/errata/RHSA-2026:73961
- https://access.redhat.com/errata/RHSA-2026:73962
- https://access.redhat.com/errata/RHSA-2026:74359
- https://access.redhat.com/errata/RHSA-2026:74360
- https://access.redhat.com/errata/RHSA-2026:74361
- https://access.redhat.com/errata/RHSA-2026:74362
- https://access.redhat.com/errata/RHSA-2026:74363
- https://access.redhat.com/errata/RHSA-2026:74364
- https://access.redhat.com/errata/RHSA-2026:74365
- https://access.redhat.com/errata/RHSA-2026:74450
- https://access.redhat.com/errata/RHSA-2026:74458
- https://access.redhat.com/errata/RHSA-2026:74459
- https://access.redhat.com/errata/RHSA-2026:74460
- https://access.redhat.com/errata/RHSA-2026:74461
- https://access.redhat.com/errata/RHSA-2026:74462
- https://access.redhat.com/errata/RHSA-2026:74463
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/errata/RHSA-2026:74677
- https://access.redhat.com/errata/RHSA-2026:74678
- https://access.redhat.com/errata/RHSA-2026:74679
- https://access.redhat.com/errata/RHSA-2026:74681
- https://access.redhat.com/errata/RHSA-2026:74683
- https://access.redhat.com/errata/RHSA-2026:74685
- https://access.redhat.com/errata/RHSA-2026:74687
- https://access.redhat.com/errata/RHSA-2026:74688
- https://access.redhat.com/errata/RHSA-2026:74771
- https://access.redhat.com/errata/RHSA-2026:7519
- https://access.redhat.com/errata/RHSA-2026:75652
- https://access.redhat.com/errata/RHSA-2026:75654
- https://access.redhat.com/errata/RHSA-2026:75655
- https://access.redhat.com/errata/RHSA-2026:75657
- https://access.redhat.com/errata/RHSA-2026:75658
- https://access.redhat.com/errata/RHSA-2026:75659
- https://access.redhat.com/errata/RHSA-2026:75660
- https://access.redhat.com/errata/RHSA-2026:76042
- https://access.redhat.com/errata/RHSA-2026:79118
- https://access.redhat.com/errata/RHSA-2026:79119
- https://access.redhat.com/errata/RHSA-2026:79120
- https://access.redhat.com/errata/RHSA-2026:79121
- https://access.redhat.com/errata/RHSA-2026:80756
- https://access.redhat.com/errata/RHSA-2026:81127
- https://access.redhat.com/errata/RHSA-2026:82059
- https://access.redhat.com/errata/RHSA-2026:82061
- https://access.redhat.com/errata/RHSA-2026:82066
- https://access.redhat.com/errata/RHSA-2026:82304
- https://access.redhat.com/errata/RHSA-2026:82322
- https://access.redhat.com/errata/RHSA-2026:82336
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82368
- https://access.redhat.com/errata/RHSA-2026:82371
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82415
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2025-6170
- https://bugzilla.redhat.com/show_bug.cgi?id=2372952
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/941
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
No English description supplied.