Red Hat Security AdvisoryRHSA-2025:19020
Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP2 security update
Released 2025-10-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Core Services 2.4.62.SP2
Fixes 5 records
Priority HIGH 72
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01367 · Published 2025-06-12 · Partial fix · 2.14.4, 2.12.5-7.el10_0 +21 CWE-787
Priority MEDIUM 48
A vulnerability was found in libxml2.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01558 · Published 2025-06-16 · Partial fix · 2.15.0, 2.12.5-7.el10_0 +34 CWE-125
Priority MEDIUM 47
A use-after-free vulnerability was found in libxml2.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00833 · Published 2025-06-16 · Partial fix · 2.15.0, 2.12.5-7.el10_0 +33 CWE-825
Priority MEDIUM 40
A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00592 · Published 2025-06-16 · Partial fix · 2.14.5, 2.12.5-7.el10_0 +1 CWE-825
Priority LOW 36
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0138 · Published 2025-09-15 · Partial fix · 2.7.2 CWE-770
THREATIST.IORead the docs