VDB
RHSA-2025%3A1925
RHSA-2025%3A1925
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in libxml2 where improper handling of memory allocation failures in `libxml2` can lead to crashes, memory leaks, or inconsistent states. While an attacker cannot directly control allocation failures, they may trigger denial-of-service conditions under extreme system stress.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | service-interconnect/skupper-controller-podman-rhel9@sha256:21db1ab4bbe383754294a19f33a3ccbe40f499f5f2df7624381bd4f11602c8fa_ppc64le as a component of Red Hat Service Interconnect 1 | * |
| Red Hat | service-interconnect/skupper-config-sync-rhel9@sha256:30115c9b2120a26e484146dc71c12b29a30ecd485c81fd5fb29e5e4389861759_ppc64le as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-config-sync-rhel9@sha256:30115c9b2120a26e484146dc71c12b29a30ecd485c81fd5fb29e5e4389861759_ppc64le |
| Red Hat | service-interconnect/skupper-site-controller-rhel9@sha256:b72b7d4225026dfebe1191bd38b61cce71740b151cd2e5c1b2a4871c02b9cc5c_ppc64le as a component of Red Hat Service Interconnect 1 | * |
| Red Hat | service-interconnect/skupper-router-rhel9@sha256:76b56fc2b2f1207ad55d35ed417514392bc493b42bf6b59559a88d9498da3a87_ppc64le as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-router-rhel9@sha256:76b56fc2b2f1207ad55d35ed417514392bc493b42bf6b59559a88d9498da3a87_ppc64le |
| Red Hat | service-interconnect/skupper-controller-podman-rhel9@sha256:d3aef991e1ad35b315ff35258c13ad047f14cae5b06c31be8f2e9d70f33cbad0_s390x as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-controller-podman-rhel9@sha256:d3aef991e1ad35b315ff35258c13ad047f14cae5b06c31be8f2e9d70f33cbad0_s390x |
| Red Hat | service-interconnect/skupper-controller-podman-container-rhel9@sha256:d3aef991e1ad35b315ff35258c13ad047f14cae5b06c31be8f2e9d70f33cbad0_s390x as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-controller-podman-container-rhel9@sha256:d3aef991e1ad35b315ff35258c13ad047f14cae5b06c31be8f2e9d70f33cbad0_s390x |
| Red Hat | service-interconnect/skupper-controller-podman-container-rhel9@sha256:21db1ab4bbe383754294a19f33a3ccbe40f499f5f2df7624381bd4f11602c8fa_ppc64le as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-controller-podman-container-rhel9@sha256:21db1ab4bbe383754294a19f33a3ccbe40f499f5f2df7624381bd4f11602c8fa_ppc64le |
| Red Hat | service-interconnect/skupper-service-controller-rhel9@sha256:60ef9cb82e10b5a0df32a7b7d9608a88757d12aeaefa78f5baa015c5d5c6c022_ppc64le as a component of Red Hat Service Interconnect 1 | * |
| Red Hat | service-interconnect/skupper-site-controller-rhel9@sha256:685a0f17bc225b89e93bb7abc2a487ef0607d16b2e6c534df46483d83ccb1213_amd64 as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-site-controller-rhel9@sha256:685a0f17bc225b89e93bb7abc2a487ef0607d16b2e6c534df46483d83ccb1213_amd64 |
| Red Hat | service-interconnect/skupper-controller-podman-rhel9@sha256:8b7b9fe664ef3dc5a6b218c815f1edcabec541173e0e9a83e07527ed732dfe84_arm64 as a component of Red Hat Service Interconnect 1 | * |
| Red Hat | service-interconnect/skupper-flow-collector-rhel9@sha256:0a67d970179bd8ba17269188a7efb7bb1eb4a95767785493cfeab16202900805_s390x as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-flow-collector-rhel9@sha256:0a67d970179bd8ba17269188a7efb7bb1eb4a95767785493cfeab16202900805_s390x |
| Red Hat | service-interconnect/skupper-controller-podman-container-rhel9@sha256:4580138c3932022cd533df65518ca737af69d606072c1856cb9fa66d4100e713_amd64 as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-controller-podman-container-rhel9@sha256:4580138c3932022cd533df65518ca737af69d606072c1856cb9fa66d4100e713_amd64 |
| Red Hat | service-interconnect/skupper-flow-collector-rhel9@sha256:7356a4434fec942da25a1e5b07ccc275227f25014677bf1a4f8219be366ad5ba_amd64 as a component of Red Hat Service Interconnect 1 | * |
| Red Hat | service-interconnect/skupper-service-controller-rhel9@sha256:5171946a13799ac7f8418401cc52570de6f8461bf7f7dbb24e61e95c595dfd6d_amd64 as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-service-controller-rhel9@sha256:5171946a13799ac7f8418401cc52570de6f8461bf7f7dbb24e61e95c595dfd6d_amd64 |
| Red Hat | service-interconnect/skupper-flow-collector-rhel9@sha256:b64e0bbaf2908375c035b39eb2a2f6555e51ad1038f508f43ab17c336455e9df_arm64 as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-flow-collector-rhel9@sha256:b64e0bbaf2908375c035b39eb2a2f6555e51ad1038f508f43ab17c336455e9df_arm64 |
| Red Hat | service-interconnect/skupper-router-rhel9@sha256:5230df96174fd1e853df6bd260995c3d2183d46a3c7e904c512cc27935d90212_s390x as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-router-rhel9@sha256:5230df96174fd1e853df6bd260995c3d2183d46a3c7e904c512cc27935d90212_s390x |
| Red Hat | service-interconnect/skupper-service-controller-rhel9@sha256:ffa3fc0b945eaaa5d36c4bf7d5695b6822094efdaf0630227e32cba1997bd3c1_arm64 as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-service-controller-rhel9@sha256:ffa3fc0b945eaaa5d36c4bf7d5695b6822094efdaf0630227e32cba1997bd3c1_arm64 |
| Red Hat | service-interconnect/skupper-operator-bundle@sha256:aa261c79b421bd49f7b46974a3bb5a790d5a1a73dd8dea4e1d8a4634fb68a51f_amd64 as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-operator-bundle@sha256:aa261c79b421bd49f7b46974a3bb5a790d5a1a73dd8dea4e1d8a4634fb68a51f_amd64 |
| Red Hat | service-interconnect/skupper-site-controller-rhel9@sha256:365ec90eb7c5f438d2732e574e5c19ae206f4911aa674c1eb8dcfb73f7b35d1a_arm64 as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-site-controller-rhel9@sha256:365ec90eb7c5f438d2732e574e5c19ae206f4911aa674c1eb8dcfb73f7b35d1a_arm64 |
| Red Hat | service-interconnect/skupper-router-rhel9@sha256:8f56e9305e12338e06da08df969352343d0628d849e48e0f3680a511219dddb3_arm64 as a component of Red Hat Service Interconnect 1 | service-interconnect/skupper-router-rhel9@sha256:8f56e9305e12338e06da08df969352343d0628d849e48e0f3680a511219dddb3_arm64 |
…and 10 more
Timeline
- Feb 27, 2025 CVE Published
- Apr 24, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:1925 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2342118 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2342757 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1925.json advisory
- https://access.redhat.com/security/cve/CVE-2022-49043 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-49043 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49043 advisory
- https://github.com/php/php-src/issues/17467 advisory
- https://gitlab.gnome.org/GNOME/libxml2/-/commit/5a19e21605398cef6a8b1452477a8705cb41562b advisory
- https://access.redhat.com/security/cve/CVE-2024-12797 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-12797 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-12797 advisory
- https://openssl-library.org/news/secadv/20250211.txt advisory