View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-14567 severity moderate: SUSE including 430 source package names (0.1.0:libxml2-2-2.9.7-3.3.1, 0.1.75:libxml2-2-2.9.7-3.3.1, …), 636 product×package rows across 234 product lines (Container bci/bci-init, Container bci/dotnet-aspnet, … (234 product lines)): Fixed 473, Known Affected 157, Known Not Affected 6.
libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.