CVE-2025-49794

{"id": "CVE-2025-49794", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-49794", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-06-16T15:50:46.041375Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"versions": [{"status": "affected", "version": "0", "lessThan": "2.15.0", "versionType": "semver"}], "packageName": "libxml2", "collectionURL": "https://gitlab.gnome.org/GNOME/libxml2/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10.0"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "versions": [{"status": "unaffected", "version": "0:2.12.5-7.el10_0", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:rhel_els:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support", "versions": [{"status": "unaffected", "version": "0:2.9.1-6.el7_9.10", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:8::appstream", "cpe:/o:redhat:enterprise_linux:8::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "versions": [{"status": "unaffected", "version": "0:2.9.7-21.el8_10.1", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:8::appstream", "cpe:/o:redhat:enterprise_linux:8::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "versions": [{"status": "unaffected", "version": "0:2.9.7-21.el8_10.1", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_aus:8.2::appstream", "cpe:/o:redhat:rhel_aus:8.2::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "versions": [{"status": "unaffected", "version": "0:2.9.7-9.el8_2.3", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_aus:8.4::appstream", "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream", "cpe:/o:redhat:rhel_aus:8.4::baseos", "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "versions": [{"status": "unaffected", "version": "0:2.9.7-9.el8_4.6", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_aus:8.4::appstream", "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream", "cpe:/o:redhat:rhel_aus:8.4::baseos", "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On", "versions": [{"status": "unaffected", "version": "0:2.9.7-9.el8_4.6", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_aus:8.6::appstream", "cpe:/a:redhat:rhel_e4s:8.6::appstream", "cpe:/a:redhat:rhel_tus:8.6::appstream", "cpe:/o:redhat:rhel_aus:8.6::baseos", "cpe:/o:redhat:rhel_e4s:8.6::baseos", "cpe:/o:redhat:rhel_tus:8.6::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "versions": [{"status": "unaffected", "version": "0:2.9.7-13.el8_6.10", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_aus:8.6::appstream", "cpe:/a:redhat:rhel_e4s:8.6::appstream", "cpe:/a:redhat:rhel_tus:8.6::appstream", "cpe:/o:redhat:rhel_aus:8.6::baseos", "cpe:/o:redhat:rhel_e4s:8.6::baseos", "cpe:/o:redhat:rhel_tus:8.6::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "versions": [{"status": "unaffected", "version": "0:2.9.7-13.el8_6.10", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_aus:8.6::appstream", "cpe:/a:redhat:rhel_e4s:8.6::appstream", "cpe:/a:redhat:rhel_tus:8.6::appstream", "cpe:/o:redhat:rhel_aus:8.6::baseos", "cpe:/o:redhat:rhel_e4s:8.6::baseos", "cpe:/o:redhat:rhel_tus:8.6::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "versions": [{"status": "unaffected", "version": "0:2.9.7-13.el8_6.10", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_e4s:8.8::appstream", "cpe:/a:redhat:rhel_tus:8.8::appstream", "cpe:/o:redhat:rhel_e4s:8.8::baseos", "cpe:/o:redhat:rhel_tus:8.8::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service", "versions": [{"status": "unaffected", "version": "0:2.9.7-16.el8_8.9", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_e4s:8.8::appstream", "cpe:/a:redhat:rhel_tus:8.8::appstream", "cpe:/o:redhat:rhel_e4s:8.8::baseos", "cpe:/o:redhat:rhel_tus:8.8::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions", "versions": [{"status": "unaffected", "version": "0:2.9.7-16.el8_8.9", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream", "cpe:/o:redhat:enterprise_linux:9::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "0:2.9.13-10.el9_6", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream", "cpe:/o:redhat:enterprise_linux:9::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "0:2.9.13-10.el9_6", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_e4s:9.0::appstream", "cpe:/o:redhat:rhel_e4s:9.0::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions", "versions": [{"status": "unaffected", "version": "0:2.9.13-1.el9_0.5", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_e4s:9.2::appstream", "cpe:/o:redhat:rhel_e4s:9.2::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "versions": [{"status": "unaffected", "version": "0:2.9.13-3.el9_2.7", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhel_eus:9.4::appstream", "cpe:/o:redhat:rhel_eus:9.4::baseos"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9.4 Extended Update Support", "versions": [{"status": "unaffected", "version": "0:2.9.13-10.el9_4", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:jboss_core_services:1.0"], "vendor": "Red Hat", "product": "Red Hat JBoss Core Services 2.4.62.SP2", "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift:4.12::el8"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.12", "versions": [{"status": "unaffected", "version": "412.86.202510291903-0", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift/ose-rhel-coreos-8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.13::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.13", "versions": [{"status": "unaffected", "version": "413.92.202510150118-0", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift/ose-rhel-coreos-9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.14::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.14", "versions": [{"status": "unaffected", "version": "414.92.202510211419-0", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift/ose-rhel-coreos-9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.15::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.15", "versions": [{"status": "unaffected", "version": "415.92.202609140326-0", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift/ose-rhel-coreos-9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.16", "versions": [{"status": "unaffected", "version": "416.94.202609011112-0", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift/ose-rhel-coreos-9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.17", "versions": [{"status": "unaffected", "version": "417.94.202510112152-0", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift/ose-rhel-coreos-9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", "versions": [{"status": "unaffected", "version": "418.94.202510230424-0", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift/ose-rhel-coreos-9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.19", "versions": [{"status": "unaffected", "version": "4.19.9.6.202510140714-0", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift/ose-rhel-coreos-9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.20", "versions": [{"status": "unaffected", "version": "4.20.9.6.202509251656-0", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift/ose-rhel-coreos-9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:webterminal:1.11::el9"], "vendor": "Red Hat", "product": "Red Hat Web Terminal 1.11 on RHEL 9", "versions": [{"status": "unaffected", "version": "1.11-19", "lessThan": "*", "versionType": "rpm"}], "packageName": "web-terminal/web-terminal-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:webterminal:1.11::el9"], "vendor": "Red Hat", "product": "Red Hat Web Terminal 1.11 on RHEL 9", "versions": [{"status": "unaffected", "version": "1.11-8", "lessThan": "*", "versionType": "rpm"}], "packageName": "web-terminal/web-terminal-tooling-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:webterminal:1.12::el9"], "vendor": "Red Hat", "product": "Red Hat Web Terminal 1.12 on RHEL 9", "versions": [{"status": "unaffected", "version": "1.12-4", "lessThan": "*", "versionType": "rpm"}], "packageName": "web-terminal/web-terminal-tooling-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-11", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-11", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-data-index-postgresql-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-11", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-db-migrator-tool-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-10", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-10", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-4", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-9", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-management-console-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-12", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-operator-bundle", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-18", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-rhel8-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-11", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-swf-builder-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_serverless:1.36::el8"], "vendor": "Red Hat", "product": "RHOSS-1.36-RHEL-8", "versions": [{"status": "unaffected", "version": "1.36.0-7", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-serverless-1/logic-swf-devmode-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cert_manager:1.16::el9"], "vendor": "Red Hat", "product": "cert-manager operator for Red Hat OpenShift 1.16", "versions": [{"status": "unaffected", "version": "v1.16.5-1760515757", "lessThan": "*", "versionType": "rpm"}], "packageName": "cert-manager/jetstack-cert-manager-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_file_integrity_operator:1::el9"], "vendor": "Red Hat", "product": "OpenShift File Integrity Operator - FIO 1", "versions": [{"status": "unaffected", "version": "v1.3", "lessThan": "*", "versionType": "rpm"}], "packageName": "compliance/openshift-file-integrity-rhel8-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:hummingbird:1"], "vendor": "Red Hat", "product": "Red Hat Hardened Images", "versions": [{"status": "unaffected", "version": "2.15.2-0.3.hum1", "lessThan": "*", "versionType": "rpm"}], "packageName": "libxml2-main", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:insights_proxy:1.5::el9"], "vendor": "Red Hat", "product": "Red Hat Insights proxy 1.5", "versions": [{"status": "unaffected", "version": "1.5.5-1754504343", "lessThan": "*", "versionType": "rpm"}], "packageName": "insights-proxy/insights-proxy-container-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp2/system-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp2/zync-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:6"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "packageName": "libxml2", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}]}, {"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "affectedData": [{"vendor": "Siemens", "product": "RUGGEDCOM ROX MX5000", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX MX5000RE", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX RX1400", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX RX1500", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX RX1501", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX RX1510", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX RX1511", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX RX1512", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX RX1524", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX RX1536", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM ROX RX5000", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.17.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "RUGGEDCOM RST2428P", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.0", "versionType": "custom"}], "defaultStatus": "unknown"}]}], "published": "2025-06-16T16:15:18.997", "references": [{"url": "https://access.redhat.com/errata/RHSA-2025:10630", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:10698", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:10699", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:11580", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:12098", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:12099", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:12199", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:12237", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:12239", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:12240", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:12241", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:13335", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:15397", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:15827", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:15828", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:18217", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:18218", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:18219", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:18240", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:19020", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:19041", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:19046", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:19894", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:21913", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:0934", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:62549", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:67857", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:7519", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2025-49794", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372373", "source": "secalert@redhat.com"}, {"url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/931", "source": "secalert@redhat.com"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-577017.html", "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-825"}]}], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path=\"...\"/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors."}, {"lang": "es", "value": "Se detect\u00f3 una vulnerabilidad de use-after-free en libxml2. Este problema se produce al analizar elementos XPath en ciertas circunstancias cuando el esquema XML contiene los elementos de esquema . Esta falla permite a un actor malicioso manipular un documento XML malicioso que se utiliza como entrada para libxml, lo que provoca el bloqueo del programa al usar libxml u otros posibles comportamientos indefinidos."}], "lastModified": "2026-10-29T09:17:06.590", "sourceIdentifier": "secalert@redhat.com"}