CVE-2025-6170

Libxml2: stack buffer overflow in xmllint interactive shell command handling

Published Jun 16, 2025 CVSS 3.1 · 2.5 Low EPSS < 1% KEV · Not listed
Description
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.

Remediation

Vendor Workaround

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to a widespread installation base, or stability. It is strongly recommended to apply the upstream patch once available.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-4251-1 libxml2 security update
EUVD EUVD EUVD-2025-18442 A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
Ubuntu USN Ubuntu USN USN-7694-1 libxml2 vulnerabilities
References
Link Providers
https://access.redhat.com/errata/RHSA-2026:36734 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:39304 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:39317 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:44481 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:46836 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:53371 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:58981 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:70596 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:70639 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72394 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72395 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72399 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72470 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72475 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72476 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72502 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73859 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73909 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73929 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73930 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73959 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73960 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73961 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73962 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74359 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74360 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74361 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74362 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74363 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74364 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74365 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74450 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74458 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74459 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74460 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74461 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74462 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74463 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74674 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74677 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74678 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74679 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74681 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74683 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74685 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74687 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74688 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74771 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:7519 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75652 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75654 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75655 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75657 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75658 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75659 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75660 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:76042 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:79118 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:79119 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:79120 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:79121 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:80756 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:81127 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82059 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82061 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82066 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82304 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82322 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82336 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82347 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82354 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82368 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82371 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82372 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82415 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82857 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82888 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:92449 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:92452 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:93473 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2025-6170 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2372952 cve-icon cve-icon
https://cert-portal.siemens.com/productcert/html/ssa-253495.html cve-icon
https://gitlab.gnome.org/GNOME/libxml2/-/issues/941 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-6170 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-6170 cve-icon
History
Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/a:redhat:openshift_ai
cpe:/o:redhat:rhel_els:6
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els
Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_aus:8.4::appstream
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
cpe:/o:redhat:rhel_aus:8.4::baseos
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
References
Type Values Removed Values Added
First Time appeared Redhat enterprise Linux Ai
CPEs cpe:/a:redhat:enterprise_linux_ai:3.5::el9
Vendors & Products Redhat enterprise Linux Ai
References
Type Values Removed Values Added
First Time appeared Redhat rhel Tus
CPEs cpe:/a:redhat:rhel_e4s:8.8::appstream
cpe:/a:redhat:rhel_e4s:9.4::appstream
cpe:/a:redhat:rhel_tus:8.8::appstream
cpe:/o:redhat:rhel_e4s:8.8::baseos
cpe:/o:redhat:rhel_e4s:9.4::baseos
cpe:/o:redhat:rhel_tus:8.8::baseos
Vendors & Products Redhat rhel Tus
References
Type Values Removed Values Added
First Time appeared Redhat rhel Aus
Redhat rhel Eus Long Life
CPEs cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream
cpe:/o:redhat:rhel_aus:8.6::baseos
cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Vendors & Products Redhat rhel Aus
Redhat rhel Eus Long Life
References
Type Values Removed Values Added
First Time appeared Redhat rhel E4s
CPEs cpe:/a:redhat:rhel_e4s:9.2::appstream
cpe:/o:redhat:rhel_e4s:9.2::baseos
Vendors & Products Redhat rhel E4s
References
Type Values Removed Values Added
First Time appeared Redhat ai Inference Server
CPEs cpe:/a:redhat:ai_inference_server:3.2::el9
Vendors & Products Redhat ai Inference Server
References
Type Values Removed Values Added
First Time appeared Redhat cert Manager
CPEs cpe:/a:redhat:cert_manager:1.20::el9
Vendors & Products Redhat cert Manager
References
Type Values Removed Values Added
First Time appeared Redhat enterprise Linux Eus
Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.6::appstream
cpe:/o:redhat:enterprise_linux_eus:10.0
cpe:/o:redhat:rhel_eus:9.6::baseos
Vendors & Products Redhat enterprise Linux Eus
Redhat rhel Eus
References
Type Values Removed Values Added
First Time appeared Redhat insights Proxy
CPEs cpe:/a:redhat:insights_proxy:1.5::el9
Vendors & Products Redhat insights Proxy
References
Type Values Removed Values Added
First Time appeared Redhat discovery
CPEs cpe:/a:redhat:discovery:2::el9
Vendors & Products Redhat discovery
References
Type Values Removed Values Added
First Time appeared Redhat rhui
CPEs cpe:/a:redhat:rhui:5::el9
Vendors & Products Redhat rhui
References
Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:9 cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/o:redhat:enterprise_linux:9::baseos
References
Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:10.2
References
Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:8::appstream
cpe:/o:redhat:enterprise_linux:8::baseos
References
Type Values Removed Values Added
CPEs cpe:/o:redhat:rhivos:1
Vendors & Products Redhat rhivos
Type Values Removed Values Added
First Time appeared Redhat rhivos
CPEs cpe:/o:redhat:rhivos:1
Vendors & Products Redhat rhivos
Type Values Removed Values Added
First Time appeared Redhat hummingbird
CPEs cpe:/a:redhat:hummingbird:1
Vendors & Products Redhat hummingbird
Type Values Removed Values Added
CPEs cpe:/o:redhat:rhivos:1
Vendors & Products Redhat rhivos
Type Values Removed Values Added
First Time appeared Redhat rhivos
CPEs cpe:/o:redhat:rhivos:1
Vendors & Products Redhat rhivos
Type Values Removed Values Added
First Time appeared Redhat openshift Container Platform
Xmlsoft
Xmlsoft libxml2
CPEs cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:a:xmlsoft:libxml2:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Vendors & Products Redhat openshift Container Platform
Xmlsoft
Xmlsoft libxml2
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description No description is available for this CVE. A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
Title libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling Libxml2: stack buffer overflow in xmllint interactive shell command handling
First Time appeared Redhat
Redhat enterprise Linux
Redhat jboss Core Services
Redhat openshift
CPEs cpe:/a:redhat:jboss_core_services:1
cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat jboss Core Services
Redhat openshift
References
Type Values Removed Values Added
Description No description is available for this CVE.
Title libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling
Weaknesses CWE-121
References
Metrics threat_severity

None

cvssV3_1

{'score': 2.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'}

threat_severity

Low