Libxml: heap use after free (uaf) leads to denial of service (dos)
Impact
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.
Source excerpt · redhatThis issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements.
What to do
There's no available mitigation other than avoid processing untrusted XML documents before updating to the libxml version containing the fix.
Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Vendor not supplied · redhat
libxml2
1 range
Vendor not supplied · redhat
libxml2
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before 2.15.0
semver versions
Other versions: unaffected
Red Hat · redhat
Red Hat Enterprise Linux 10
1 range
Red Hat · redhat
Red Hat Enterprise Linux 10
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.12.5-7.el10_0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:10.0Red Hat · redhat
Red Hat Enterprise Linux 7 Extended Lifecycle Support
1 range
Red Hat · redhat
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.1-6.el7_9.10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:rhel_els:7Red Hat · redhat
Red Hat Enterprise Linux 8
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-21.el8_10.1 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:8::appstreamcpe:/o:redhat:enterprise_linux:8::baseosRed Hat · redhat
Red Hat Enterprise Linux 8
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-21.el8_10.1 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:8::appstreamcpe:/o:redhat:enterprise_linux:8::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.2 Advanced Update Support
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.2 Advanced Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-9.el8_2.3 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_aus:8.2::appstreamcpe:/o:redhat:rhel_aus:8.2::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-9.el8_4.6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_aus:8.4::appstreamcpe:/a:redhat:rhel_eus_long_life:8.4::appstreamcpe:/o:redhat:rhel_aus:8.4::baseoscpe:/o:redhat:rhel_eus_long_life:8.4::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-9.el8_4.6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_aus:8.4::appstreamcpe:/a:redhat:rhel_eus_long_life:8.4::appstreamcpe:/o:redhat:rhel_aus:8.4::baseoscpe:/o:redhat:rhel_eus_long_life:8.4::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-13.el8_6.10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_aus:8.6::appstreamcpe:/a:redhat:rhel_e4s:8.6::appstreamcpe:/a:redhat:rhel_tus:8.6::appstreamcpe:/o:redhat:rhel_aus:8.6::baseoscpe:/o:redhat:rhel_e4s:8.6::baseoscpe:/o:redhat:rhel_tus:8.6::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-13.el8_6.10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_aus:8.6::appstreamcpe:/a:redhat:rhel_e4s:8.6::appstreamcpe:/a:redhat:rhel_tus:8.6::appstreamcpe:/o:redhat:rhel_aus:8.6::baseoscpe:/o:redhat:rhel_e4s:8.6::baseoscpe:/o:redhat:rhel_tus:8.6::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-13.el8_6.10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_aus:8.6::appstreamcpe:/a:redhat:rhel_e4s:8.6::appstreamcpe:/a:redhat:rhel_tus:8.6::appstreamcpe:/o:redhat:rhel_aus:8.6::baseoscpe:/o:redhat:rhel_e4s:8.6::baseoscpe:/o:redhat:rhel_tus:8.6::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-16.el8_8.9 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_e4s:8.8::appstreamcpe:/a:redhat:rhel_tus:8.8::appstreamcpe:/o:redhat:rhel_e4s:8.8::baseoscpe:/o:redhat:rhel_tus:8.8::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.7-16.el8_8.9 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_e4s:8.8::appstreamcpe:/a:redhat:rhel_tus:8.8::appstreamcpe:/o:redhat:rhel_e4s:8.8::baseoscpe:/o:redhat:rhel_tus:8.8::baseosRed Hat · redhat
Red Hat Enterprise Linux 9
1 range
Red Hat · redhat
Red Hat Enterprise Linux 9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.13-10.el9_6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:9::appstreamcpe:/o:redhat:enterprise_linux:9::baseosRed Hat · redhat
Red Hat Enterprise Linux 9
1 range
Red Hat · redhat
Red Hat Enterprise Linux 9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.13-10.el9_6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:9::appstreamcpe:/o:redhat:enterprise_linux:9::baseosRed Hat · redhat
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
1 range
Red Hat · redhat
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.13-1.el9_0.5 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_e4s:9.0::appstreamcpe:/o:redhat:rhel_e4s:9.0::baseosRed Hat · redhat
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
1 range
Red Hat · redhat
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.13-3.el9_2.7 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_e4s:9.2::appstreamcpe:/o:redhat:rhel_e4s:9.2::baseosRed Hat · redhat
Red Hat Enterprise Linux 9.4 Extended Update Support
1 range
Red Hat · redhat
Red Hat Enterprise Linux 9.4 Extended Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:2.9.13-10.el9_4 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_eus:9.4::appstreamcpe:/o:redhat:rhel_eus:9.4::baseosRed Hat · redhat
Red Hat JBoss Core Services 2.4.62.SP2
0 ranges
Red Hat · redhat
Red Hat JBoss Core Services 2.4.62.SP2
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:jboss_core_services:1.0Red Hat · redhat
Red Hat OpenShift Container Platform 4.12
1 range
Red Hat · redhat
Red Hat OpenShift Container Platform 4.12
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
412.86.202510291903-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.12::el8Red Hat · redhat
Red Hat OpenShift Container Platform 4.13
1 range
Red Hat · redhat
Red Hat OpenShift Container Platform 4.13
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
413.92.202510150118-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.13::el9Red Hat · redhat
Red Hat OpenShift Container Platform 4.14
1 range
Red Hat · redhat
Red Hat OpenShift Container Platform 4.14
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
414.92.202510211419-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.14::el9Red Hat · redhat
Red Hat OpenShift Container Platform 4.15
1 range
Red Hat · redhat
Red Hat OpenShift Container Platform 4.15
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
415.92.202609140326-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.15::el9Red Hat · redhat
Red Hat OpenShift Container Platform 4.16
1 range
Red Hat · redhat
Red Hat OpenShift Container Platform 4.16
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
416.94.202609011112-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.16::el9Red Hat · redhat
Red Hat OpenShift Container Platform 4.17
1 range
Red Hat · redhat
Red Hat OpenShift Container Platform 4.17
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
417.94.202510112152-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.17::el9Red Hat · redhat
Red Hat OpenShift Container Platform 4.18
1 range
Red Hat · redhat
Red Hat OpenShift Container Platform 4.18
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
418.94.202510230424-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.18::el9Red Hat · redhat
Red Hat OpenShift Container Platform 4.19
1 range
Red Hat · redhat
Red Hat OpenShift Container Platform 4.19
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
4.19.9.6.202510140714-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.19::el9Red Hat · redhat
Red Hat OpenShift Container Platform 4.20
1 range
Red Hat · redhat
Red Hat OpenShift Container Platform 4.20
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
4.20.9.6.202509251656-0 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4.20::el9Red Hat · redhat
Red Hat Web Terminal 1.11 on RHEL 9
1 range
Red Hat · redhat
Red Hat Web Terminal 1.11 on RHEL 9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.11-19 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:webterminal:1.11::el9Red Hat · redhat
Red Hat Web Terminal 1.11 on RHEL 9
1 range
Red Hat · redhat
Red Hat Web Terminal 1.11 on RHEL 9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.11-8 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:webterminal:1.11::el9Red Hat · redhat
Red Hat Web Terminal 1.12 on RHEL 9
1 range
Red Hat · redhat
Red Hat Web Terminal 1.12 on RHEL 9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.12-4 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:webterminal:1.12::el9Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-11 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-11 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-11 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-4 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-9 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-12 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-18 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-11 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
RHOSS-1.36-RHEL-8
1 range
Red Hat · redhat
RHOSS-1.36-RHEL-8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.36.0-7 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_serverless:1.36::el8Red Hat · redhat
cert-manager operator for Red Hat OpenShift 1.16
1 range
Red Hat · redhat
cert-manager operator for Red Hat OpenShift 1.16
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v1.16.5-1760515757 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:cert_manager:1.16::el9Red Hat · redhat
OpenShift File Integrity Operator - FIO 1
1 range
Red Hat · redhat
OpenShift File Integrity Operator - FIO 1
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v1.3 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_file_integrity_operator:1::el9Red Hat · redhat
Red Hat Hardened Images
1 range
Red Hat · redhat
Red Hat Hardened Images
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
2.15.2-0.3.hum1 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:hummingbird:1Red Hat · redhat
Red Hat Insights proxy 1.5
1 range
Red Hat · redhat
Red Hat Insights proxy 1.5
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
1.5.5-1754504343 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:insights_proxy:1.5::el9Red Hat · redhat
Red Hat 3scale API Management Platform 2
0 ranges
Red Hat · redhat
Red Hat 3scale API Management Platform 2
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:red_hat_3scale_amp:2Red Hat · redhat
Red Hat 3scale API Management Platform 2
0 ranges
Red Hat · redhat
Red Hat 3scale API Management Platform 2
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unaffected
Product identifiers (CPE)
cpe:/a:redhat:red_hat_3scale_amp:2Red Hat · redhat
Red Hat Enterprise Linux 6
0 ranges
Red Hat · redhat
Red Hat Enterprise Linux 6
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unknown
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:6Siemens · siemens-SADP
RUGGEDCOM ROX MX5000
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX MX5000
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX MX5000RE
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX MX5000RE
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX RX1400
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX RX1400
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX RX1500
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX RX1500
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX RX1501
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX RX1501
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX RX1510
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX RX1510
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX RX1511
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX RX1511
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX RX1512
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX RX1512
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX RX1524
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX RX1524
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX RX1536
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX RX1536
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM ROX RX5000
1 range
Siemens · siemens-SADP
RUGGEDCOM ROX RX5000
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V2.17.1
custom versions
Other versions: unknown
Siemens · siemens-SADP
RUGGEDCOM RST2428P
1 range
Siemens · siemens-SADP
RUGGEDCOM RST2428P
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0 → before V4.0
custom versions
Other versions: unknown
Original source description
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2025-49794View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 4
Assigning organization
Additional data publisher
Additional data publisher
Additional data publisher
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.