CyberRota Analysis
AI-GeneratedA vulnerability in libxml2 with Python bindings allows remote attackers to exploit a double-free error in the SAX attributeDecl callback handler by sending a specially crafted XML document with a DTD containing enumerated attribute values. This can result in a denial of service (DoS) by causing Python applications that utilize these bindings to crash. Organizations using libxml2 in their Python applications should prioritize addressing this issue to maintain application stability and security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.