8.5
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, при специфични условия, с обикновен потребителски вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.
Засегнати продукти
- Red Hat Red Hat Enterprise Linux 10: от 0:2.12.5-10.el10_2.4 нататък
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: от 0:2.12.5-9.el10_0.9 нататък
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: от 0:2.9.1-6.el7_9.20 нататък
- Red Hat Red Hat Enterprise Linux 8: от 0:2.9.7-21.el8_10.9 нататък
- Red Hat Red Hat Enterprise Linux 8: от 0:2.9.7-21.el8_10.9 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: от 0:2.9.7-9.el8_4.20 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: от 0:2.9.7-9.el8_4.20 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: от 0:2.9.7-13.el8_6.24 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: от 0:2.9.7-13.el8_6.24 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: от 0:2.9.7-16.el8_8.24 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: от 0:2.9.7-16.el8_8.24 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:2.9.13-14.el9_8.5 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:2.9.13-14.el9_8.5 нататък
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: от 0:2.9.13-3.el9_2.20 нататък
- Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: от 0:2.9.13-13.el9_4.10 нататък
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: от 0:2.9.13-13.el9_6 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790589912 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790589914 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: от 1790589855 нататък
- Red Hat Red Hat Cost Management On-Premise 1: от 1791460851 нататък
- Red Hat Red Hat Hardened Images: от 2.15.4-0.1.hum1 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1793041986 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1793041981 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1793042072 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1793042067 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1793041987 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1793329709 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793042006 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793042145 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793042006 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793042011 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793042086 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793042088 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793041995 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793042074 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793042008 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1793326837 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1793042010 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1793042162 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1793042004 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1793042092 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1793042117 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1793042093 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1793042114 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1793042024 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1793042008 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1791978534 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1791978528 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1791978528 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1791964013 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1791978693 нататък
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Hardened Images
- Red Hat Red Hat OpenShift Container Platform 4
- Red Hat Red Hat OpenShift Container Platform 4
- Red Hat Red Hat OpenShift Container Platform 4
- Red Hat Red Hat OpenShift Container Platform 5
Вид слабост
История
- 8 септември 2026 Публикувано
Други уязвимости в Red Hat Red Hat Enterprise Linux 10
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-74860
- https://nvd.nist.gov/vuln/detail/CVE-2026-74860
- https://access.redhat.com/errata/RHSA-2026:64463
- https://access.redhat.com/errata/RHSA-2026:71585
- https://access.redhat.com/errata/RHSA-2026:71586
- https://access.redhat.com/errata/RHSA-2026:71641
- https://access.redhat.com/errata/RHSA-2026:72470
- https://access.redhat.com/errata/RHSA-2026:72475
- https://access.redhat.com/errata/RHSA-2026:72476
- https://access.redhat.com/errata/RHSA-2026:79357
- https://access.redhat.com/errata/RHSA-2026:82939
- https://access.redhat.com/errata/RHSA-2026:89750
- https://access.redhat.com/errata/RHSA-2026:89759
- https://access.redhat.com/errata/RHSA-2026:90309
- https://access.redhat.com/errata/RHSA-2026:91202
- https://access.redhat.com/errata/RHSA-2026:91204
- https://access.redhat.com/errata/RHSA-2026:91206
- https://access.redhat.com/errata/RHSA-2026:91207
- https://access.redhat.com/errata/RHSA-2026:91217
- https://access.redhat.com/errata/RHSA-2026:91218
- https://access.redhat.com/errata/RHSA-2026:91219
- https://access.redhat.com/errata/RHSA-2026:91224
- https://access.redhat.com/errata/RHSA-2026:91232
- https://access.redhat.com/errata/RHSA-2026:91233
- https://access.redhat.com/errata/RHSA-2026:91234
- https://access.redhat.com/errata/RHSA-2026:91235
- https://access.redhat.com/errata/RHSA-2026:91236
- https://access.redhat.com/errata/RHSA-2026:91237
- https://access.redhat.com/errata/RHSA-2026:91238
- https://access.redhat.com/errata/RHSA-2026:91241
- https://access.redhat.com/errata/RHSA-2026:91242
- https://access.redhat.com/errata/RHSA-2026:91243
- https://access.redhat.com/errata/RHSA-2026:91244
- https://access.redhat.com/errata/RHSA-2026:91245
- https://access.redhat.com/errata/RHSA-2026:91246
- https://access.redhat.com/errata/RHSA-2026:91248
- https://access.redhat.com/errata/RHSA-2026:91249
- https://access.redhat.com/errata/RHSA-2026:92352
- https://access.redhat.com/errata/RHSA-2026:92589
- https://access.redhat.com/errata/RHSA-2026:93463
- https://access.redhat.com/errata/RHSA-2026:93473
- https://access.redhat.com/errata/RHSA-2026:93791
- https://access.redhat.com/errata/RHSA-2026:94459
- https://access.redhat.com/errata/RHSA-2026:94468
- https://access.redhat.com/security/cve/CVE-2026-74860
- https://bugzilla.redhat.com/show_bug.cgi?id=2529697