Vulnerability record/PUBLISHED/Published Jun 16, 2025 15:24:05 UTC
CVE-2025-6170
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.
Base score2.5/ 10
SeverityLowCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityLow
Attack vectorLocalAV
Attack complexityHighAC
Privileges requiredNonePR
User interactionRequiredUI
ScopeUnchangedS
Confidentiality impactNoneC
Integrity impactNoneI
Availability impactLowA
CVSS vector string
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:LCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authorityredhat
Last updatedNov 2, 2026 03:31:51 UTC
PublishedJun 16, 2025 15:24:05 UTC
ReservedJun 16, 2025 05:59:31 UTC
Credits
- Red Hat would like to thank Ahmed Lekssays for reporting this issue.