A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-07-19T13:00:00

Updated: 2024-08-05T09:29:51.525Z

Reserved: 2018-07-19T00:00:00

Link: CVE-2018-14404

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-07-19T13:29:00.480

Modified: 2024-11-21T03:49:00.193

Link: CVE-2018-14404

cve-icon Redhat

Severity : Moderate

Publid Date: 2018-06-18T00:00:00Z

Links: CVE-2018-14404 - Bugzilla