NetSight
IP …
high8.5

CVE-2026-74860

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this...

Impact

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.

Affected products

VendorProductAffected versions
Red HatRed Hat Enterprise Linux 10
All versions
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
All versions
Red HatRed Hat Enterprise Linux 8
All versions
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
All versions
Version patch: 0:2.9.7-9.el8_4.20
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions
Version patch: 0:2.9.7-13.el8_6.24
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
All versions
Version patch: 0:2.9.7-13.el8_6.24
Red HatRed Hat Enterprise Linux 9
All versions
Version patch: 0:2.9.13-14.el9_8.5
Red HatRed Hat Enterprise Linux 9.2 Update Services For SAP Solutions
All versions
Red HatRed Hat Enterprise Linux 9.4 Update Services For SAP Solutions
All versions
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions
Version patch: 0:2.9.7-16.el8_8.24
Red HatRed Hat Enterprise Linux 8.8 Update Services For SAP Solutions
All versions
Version patch: 0:2.9.7-16.el8_8.24
Red HatCert Manager Support For Red Hat OpenShift Release 1.20
Versions patch: 1790589912, patch: 1790589914, patch: 1790589855
Red HatRed Hat OpenShift AI 3.0
Versions patch: 1793042072, patch: 1793041981, patch: 1793042067, patch: 1793041986, patch: 1793041987
Red HatRed Hat Update Infrastructure 5
Versions patch: 1791978693, patch: 1791978528, patch: 1791964013, patch: 1791978534
Red HatRed Hat OpenShift AI 3.5
Versions patch: 1793042004, patch: 1793042114, patch: 1793042092, patch: 1793042117, patch: 1793042008, patch: 1793042024
Red HatRed Hat OpenShift AI 3.4
Versions patch: 1793041995, patch: 1793042008, patch: 1793042088, patch: 1793042074, patch: 1793042086, patch: 1793042145
Red HatRed Hat Hardened Images
Version patch: 2.15.4-0.1.hum1
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
All versions

Weakness classification

CWE-763

References