suse · CVE-2008-4226

Quick triage

Priority: critical Published: 2021-05-30 12:44:00 UTC Updated: 2026-04-18 20:25:26 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2008-4226 severity critical: SUSE including 87 source package names (libxml2-2-2.11.6-2.1, libxml2-2-2.11.6-slfo.1.1_1.2, …), 121 product×package rows across 32 product lines (SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Desktop 12 SP1, … (32 product lines)): Fixed 121.

Description:

Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.

cvelogic Threat Intelligence