NetSight
IP …
low2.5

CVE-2025-6170

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.

Impact

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.

Affected products

VendorProductAffected versions
RedhatJboss Core Services
All versions
RedhatOpenshift Container Platform
Version 4.0
RedhatEnterprise Linux
Versions 6.0, 7.0, 8.0, 9.0, 10.0
XmlsoftLibxml2
All versions
Red HatRed Hat Enterprise Linux 10
All versions
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
All versions
Red HatRed Hat Enterprise Linux 8
All versions
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions
Version patch: 0:2.9.7-9.el8_4.20
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
All versions
Version patch: 0:2.9.7-9.el8_4.20
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
All versions
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions
Red HatRed Hat Enterprise Linux 8.8 Update Services For SAP Solutions
All versions
Red HatRed Hat Enterprise Linux 9
All versions
Red HatRed Hat AI Inference Server 3.5
Versions patch: 1791425869, patch: 1791427182, patch: 1791803821, patch: 1791473631, patch: 1791818357, patch: 1791473614
Red HatRed Hat Update Infrastructure 5
Versions patch: 1784795076, patch: 1784794818, patch: 1787135742, patch: 1784794289, patch: 1784795112, patch: 1787241211
Red HatCert Manager Support For Red Hat OpenShift Release 1.20
Versions patch: 1790589855, patch: 1790223719, patch: 1790589912, patch: 1790598593, patch: 1790589914, patch: 1790589998
Red HatRed Hat Enterprise Linux AI 3.5
Versions patch: 1793135861, patch: 1793194817, patch: 1793206758, patch: 1793194834, patch: 1793135863, patch: 1793194815
Red HatRed Hat OpenShift AI 3.4
Versions patch: 1790703597, patch: 1790703553, patch: 1790703631, patch: 1790703541, patch: 1790703545, patch: 1790703542
Red HatRed Hat OpenShift AI 3.3
Versions patch: 1791231820, patch: 1790703615, patch: 1790703579, patch: 1790703601, patch: 1790703524, patch: 1791232257
Red HatRed Hat AI Inference Server 3.2
Versions patch: 1790621713, patch: 1790621718, patch: 1790621714
Red HatRed Hat OpenShift AI 3.0
Versions patch: 1790276886, patch: 1790276974, patch: 1790276884, patch: 1790277045, patch: 1790276889
Red HatRed Hat Discovery 2
Versions patch: 1784821750, patch: 1784821670
Red HatRed Hat OpenShift AI 3.5
Versions patch: 1790703656, patch: 1790703552, patch: 1790703630, patch: 1790703707, patch: 1790703645, patch: 1790703554

Weakness classification

CWE-121

References