Ubuntu

Multiple Vulnerabilities in libxml2 and libxslt Discovered

First seen 27 Nov 2025, 18:34 UTC • Ubuntu

•27.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Multiple vulnerabilities affecting libxml2 and its Python bindings were discovered, allowing attackers to potentially crash the software or execute arbitrary code. Specifically, issues were found in the handling of certain attributes and memory operations, leading to denial of service conditions. The vulnerabilities are tracked as CVE-2025-32414 and CVE-2025-32415.

How this analysis works

Attack Flow

8 entities, 11 inferred relationships (STIX 2.1).

Technique (2)

DDoS
Denial of Service

Organization (1)

Ubuntu

Vulnerability (3)

CVE-2025-32414
CVE-2025-32415
CVE-2025-7425

Affected Platform (2)

Libxml2
Libxslt

Relationships

CVE-2025-32414 targets Libxml2
CVE-2025-32414 targets Libxslt
CVE-2025-32415 targets Libxml2
CVE-2025-32415 targets Libxslt
CVE-2025-7425 targets Libxml2
CVE-2025-7425 targets Libxslt
DDoS targets Libxml2
DDoS targets Libxslt
Denial of Service targets Libxml2
Denial of Service targets Libxslt
CVE-2025-32414 related to Ubuntu

Continue Reading

Critical RCE Vulnerability in Rails Active Storage Disclosed Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks Supply Chain Attack Compromises DAEMON Tools with Malicious Backdoor Critical Januscape Vulnerability in Linux KVM Exposes Cloud Servers to Attacks Multiple rsync Vulnerabilities Affect Ubuntu 22.04, 24.04, 25.10, and 26.04 LTS Critical ldns Vulnerability in Ubuntu Allows Spoofed DNS Responses

Multiple Vulnerabilities in libxml2 and libxslt Discovered

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading