Vulnerability Report

CVE-2007-6284

Title: Debian Debian Linux Denial of Service (DoS)

Denial of Service (DoS)

Proof Of Concept

No public PoC currently indexed for CVE-2007-6284.

CWE Category CWE-399
Published Date Jan 12, 2008
Modified Date Apr 09, 2025
Exploit Status Not Found
Score 5.0 CVSS v2.0
Exploit Probability (EPSS)
5.10%

Vulnerability Summary

CVE-2007-6284: The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.

Impacted Vendors

Reference Links

http://bugs.gentoo.org/show_bug.cgi?id=202628 http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html http://lists.vmware.com/pipermail/security-announce/2008/000009.html http://mail.gnome.org/archives/xml/2008-January/msg00036.html http://secunia.com/advisories/28439 http://secunia.com/advisories/28444 http://secunia.com/advisories/28450 http://secunia.com/advisories/28452 http://secunia.com/advisories/28458 http://secunia.com/advisories/28466 http://secunia.com/advisories/28470 http://secunia.com/advisories/28475 http://secunia.com/advisories/28636 http://secunia.com/advisories/28716 http://secunia.com/advisories/28740 http://secunia.com/advisories/29591 http://secunia.com/advisories/31074 http://security.gentoo.org/glsa/glsa-200801-20.xml http://securitytracker.com/id?1019181 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103201-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201514-1 http://support.avaya.com/elmodocs2/security/ASA-2008-047.htm http://support.avaya.com/elmodocs2/security/ASA-2008-050.htm http://www.debian.org/security/2008/dsa-1461 http://www.mandriva.com/security/advisories?name=MDVSA-2008:010 http://www.novell.com/linux/security/advisories/suse_security_summary_report.html http://www.redhat.com/support/errata/RHSA-2008-0032.html http://www.securityfocus.com/archive/1/486410/100/0/threaded http://www.securityfocus.com/archive/1/490306/100/0/threaded http://www.securityfocus.com/bid/27248 http://www.vupen.com/english/advisories/2008/0117 http://www.vupen.com/english/advisories/2008/0144 http://www.vupen.com/english/advisories/2008/1033/references http://www.vupen.com/english/advisories/2008/2094/references http://www.xmlsoft.org/news.html https://bugzilla.redhat.com/show_bug.cgi?id=425927 https://issues.rpath.com/browse/RPL-2121 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11594 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5216 https://usn.ubuntu.com/569-1/ https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00379.html https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00396.html http://bugs.gentoo.org/show_bug.cgi?id=202628 http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html http://lists.vmware.com/pipermail/security-announce/2008/000009.html http://mail.gnome.org/archives/xml/2008-January/msg00036.html http://secunia.com/advisories/28439 http://secunia.com/advisories/28444 http://secunia.com/advisories/28450 http://secunia.com/advisories/28452 http://secunia.com/advisories/28458 http://secunia.com/advisories/28466 http://secunia.com/advisories/28470 http://secunia.com/advisories/28475 http://secunia.com/advisories/28636 http://secunia.com/advisories/28716 http://secunia.com/advisories/28740 http://secunia.com/advisories/29591 http://secunia.com/advisories/31074 http://security.gentoo.org/glsa/glsa-200801-20.xml http://securitytracker.com/id?1019181 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103201-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201514-1 http://support.avaya.com/elmodocs2/security/ASA-2008-047.htm http://support.avaya.com/elmodocs2/security/ASA-2008-050.htm http://www.debian.org/security/2008/dsa-1461 http://www.mandriva.com/security/advisories?name=MDVSA-2008:010 http://www.novell.com/linux/security/advisories/suse_security_summary_report.html http://www.redhat.com/support/errata/RHSA-2008-0032.html http://www.securityfocus.com/archive/1/486410/100/0/threaded http://www.securityfocus.com/archive/1/490306/100/0/threaded http://www.securityfocus.com/bid/27248 http://www.vupen.com/english/advisories/2008/0117 http://www.vupen.com/english/advisories/2008/0144 http://www.vupen.com/english/advisories/2008/1033/references http://www.vupen.com/english/advisories/2008/2094/references http://www.xmlsoft.org/news.html https://bugzilla.redhat.com/show_bug.cgi?id=425927 https://issues.rpath.com/browse/RPL-2121 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11594 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5216 https://usn.ubuntu.com/569-1/ https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00379.html https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00396.html
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
5.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:N/I:N/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2007-6284 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected Stack

No specific products linked.