AZL-42019

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42019.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-42019

Upstream

CVE-2024-34459

Published

2024-05-14T15:39:11Z

Modified

2026-04-01T05:14:26.125205Z

Summary

CVE-2024-34459 affecting package libxml2 for versions less than 2.10.4-3

Details

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-34459

Affected packages

Azure Linux:2 / libxml2

Package

Name: libxml2
Purl: pkg:rpm/azure-linux/libxml2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.10.4-3

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42019.json"