CVE-2025-6170

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.

Open
LOW (1.5)
  • logo

    System detected CVE-2025-6170 with a risk of 1.5

Add a comment

Mark as False Positive
Last calculated at:

Affected component

Logo von deb debian/libxml2

Installed version:
2.9.14
Fixed in:
no patch available
Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 667098114b5ef45c7830e7aa599604fa65eb818f