CVE-2026-0992

{"id": "CVE-2026-0992", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.9, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.4}]}, "published": "2026-01-15T15:15:52.657", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:7519", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-0992", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429975", "source": "secalert@redhat.com"}, {"url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019", "source": "secalert@redhat.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en la biblioteca libxml2. Esta vulnerabilidad de consumo de recursos no controlado ocurre al procesar cat\u00e1logos XML que contienen elementos repetidos que apuntan al mismo cat\u00e1logo descendente. Un atacante remoto puede explotar esto al proporcionar cat\u00e1logos manipulados, lo que hace que el analizador recorra redundantemente las cadenas de cat\u00e1logos. Esto conduce a un consumo excesivo de CPU y degrada la disponibilidad de la aplicaci\u00f3n, lo que resulta en una condici\u00f3n de denegaci\u00f3n de servicio."}], "lastModified": "2026-04-22T10:16:50.273", "sourceIdentifier": "secalert@redhat.com"}