BUG #16793: Libxml2 contains a null pointer dereference flaw in xpath.c

Started by PG Bug reporting formover 5 years ago2 messagesbugs
Jump to latest
#1PG Bug reporting form
noreply@postgresql.org

The following bug has been logged on the website:

Bug reference: 16793
Logged by: Srinivas Gowda
Email address: srinivasg@jfrog.com
PostgreSQL version: 12.5
Operating system: docker image alpine
Description:

Libxml2 contains a null pointer dereference flaw in xpath.c that is
triggered when handling errors for xpointer expressions. this may allow a
context-dependent attacker to crash a process linked against the library.

#2Tom Lane
tgl@sss.pgh.pa.us
In reply to: PG Bug reporting form (#1)
Re: BUG #16793: Libxml2 contains a null pointer dereference flaw in xpath.c

PG Bug reporting form <noreply@postgresql.org> writes:

Libxml2 contains a null pointer dereference flaw in xpath.c that is
triggered when handling errors for xpointer expressions. this may allow a
context-dependent attacker to crash a process linked against the library.

Why are you reporting this here, and not to the libxml2 authors?
There's nothing we can do about it.

regards, tom lane