SecuritySpace - CVE-2023-29469

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2023-29469

Description: An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value).

Test IDs: 1.3.6.1.4.1.25623.1.1.1.2.2023.3405 1.3.6.1.4.1.25623.1.1.1.1.2023.5391

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2023-29469
https://gitlab.gnome.org/GNOME/libxml2/-/issues/510
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4
https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html

CVE ID:	CVE-2023-29469
Description:	An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value).
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2023.3405 1.3.6.1.4.1.25623.1.1.1.1.2023.5391
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2023-29469 https://gitlab.gnome.org/GNOME/libxml2/-/issues/510 https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4 https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html