CVE-2023-28484

Published: Apr 24, 2023

Modified: May 30, 2025

PUBLISHED

Description

In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4

https://gitlab.gnome.org/GNOME/libxml2/-/issues/491

[debian-lts-announce] 20230430 [SECURITY] [DLA 3405-1] libxml2 security update

mailing-list

https://security.netapp.com/advisory/ntap-20230601-0006/

https://security.netapp.com/advisory/ntap-20240201-0005/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-28484

Description

Affected Products

References