CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2018-9251
Severity
MEDIUM
CVSS
5.3
EPSS
2.44%
Original NVD Description
The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.
Related CVEs
Other vulnerabilities affecting the same vendor(s)