CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.

• CVE-2021-3517.patch: validate UTF8 in xmlEncodeEntities
• CVE-2021-3518.patch: fix user-after-free with 'xmllint --xinclude --dropdtd'
• CVE-2021-3537.patch: propagate error in xmlParseElementChildrenContentDeclPriv
• CVE-2021-3541.patch: parser fix for the billion laughs attack
• CVE-2021-3516.patch: fix use-after-free with 'xmllint --html --push'
• CVE-2017-8872.patch: free input buffer in xmlHaltParser
• CVE-2019-20388.patch: fix memory leak in xmlSchemaValidateStream
• CVE-2020-24977.patch: fix out-of-bounds read with 'xmllint --htmlout'

• SECURITY UPDATE: Out-of-bounds array access
  • debian/patches/CVE-2021-3517.patch: Validate UTF8 in xmlEncodeEntities
  • CVE-2021-3517
• SECURITY UPDATE: Use-after-free error
  • debian/patches/CVE-2021-3518.patch: Fix use-after-free with 'xmllint --xinclude --dropdtd'
  • CVE-2021-3518
• SECURITY UPDATE: Null pointer dereference while parsing in recovery mode
  • debian/patches/CVE-2021-3537.patch: Propagate error in xmlParseElementChildrenContentDeclPriv
  • CVE-2021-3537
• SECURITY UPDATE: Parser fix for the billion laugs attach
  • debian/patches/CVE-2021-3541.patch: Fix parameter entities expansion in xmlParserEntityCheck
  • CVE-2021-3541
• SECURITY UPDATE: Miscalculation of available bytes when parsing
  • debian/patches/CVE-2017-8872.patch: Free input buffer in xmlHaltParser
  • CVE-2017-8872
• SECURITY UPDATE: Memory leak
  • debian/patches/CVE-2019-20388.patch: Fix memory leak in xmlSchemaValidateStream
  • CVE-2019-20388
• SECURITY UPDATE: Out-of-bounds array access
  • debian/patches/CVE-2020-24977.patch: Fix out-of-bounds read with 'xmllint --htmlout'
  • CVE-2020-24977
• SECURITY UPDATE: Use-after-free error
  • debian/patches/CVE-2021-3516.patch: Fix use-after-free with 'xmllint --html --push'
  • CVE-2021-3516

• CVE-2021-3517.patch: validate UTF8 in xmlEncodeEntities
• CVE-2021-3518.patch: fix user-after-free with 'xmllint --xinclude --dropdtd'
• CVE-2021-3537.patch: propagate error in xmlParseElementChildrenContentDeclPriv
• CVE-2021-3541.patch: parser fix for the billion laughs attack
• CVE-2021-3516.patch: fix use-after-free with 'xmllint --html --push'
• CVE-2017-8872.patch: free input buffer in xmlHaltParser
• CVE-2019-20388.patch: fix memory leak in xmlSchemaValidateStream
• CVE-2020-24977.patch: fix out-of-bounds read with 'xmllint --htmlout'

• CVE-2017-7375: add validation for parsed entity references
• CVE-2017-7376: fix buffer overflow in URL handling
• CVE-2017-8872: free input buffer in xmlHaltParser

This update for libxml2 fixes the following issues:

• CVE-2017-8872: Out-of-bounds read could lead to application crash (bsc#1038444)

This update for libxml2 fixes the following issues:

Security issues fixed:

• CVE-2017-8872: Out-of-bounds read in htmlParseTryOrFinish. (bsc#1038444)

Yunho Kim discovered that libxml2 incorrectly handled certain error conditions. A remote attacker could exploit this with a crafted XML file to cause a denial of service, or possibly cause libxml2 to expose sensitive information. This issue only affected Ubuntu 14.04 ESM, and Ubuntu 16.04 ESM. (CVE-2017-8872)

Zhipeng Xie discovered that libxml2 incorrectly handled certain XML schemas. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS. (CVE-2019-20388)

It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A remote attacker could possibly exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2020-24977)

It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A remote attacker could possibly exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. (CVE-2021-3517)

It was discovered that libxml2 did not properly handle certain crafted XML files. A local attacker could exploit this with a crafted input to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-3516, CVE-2021-3518)

It was discovered that libxml2 incorrectly handled error states. A remote attacker could exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. (CVE-2021-3537)

Sebastian Pipping discovered that libxml2 did not properly handle certain crafted XML files. A remote attacker could exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3541)