CVE-2024-34459 is a buffer over-read vulnerability in the xmllint program from the libxml2 package. The flaw occurs in the xmlHTMLPrintFileContext function within xmllint.c when processing crafted files with the --htmlout command line option, potentially causing an application crash and denial of service. This vulnerability is limited to the xmllint program when invoked with --htmlout and does not affect other uses of libxml2 or applications that do not expose xmllint. Red Hat's advisory for Red Hat Update Infrastructure 5.2 includes updated container images incorporating the latest RHUI RPM packages and base images, which address this and multiple other CVEs. No explicit patch details are provided in the advisory, but deployment of updated container images via the rhui-installer utility is recommended.

An attacker can cause a denial of service by triggering a buffer over-read in xmllint when using the --htmlout option, leading to application crashes. There is no direct confidentiality or integrity impact reported. The vulnerability does not affect systems that do not use or expose the xmllint program with the vulnerable option. No known exploits in the wild have been reported. The impact is limited to denial of service conditions.

Red Hat advises deploying the updated Red Hat Update Infrastructure 5.2 container images using the rhui-installer utility as described in the official documentation. Additionally, users should avoid processing untrusted files with the xmllint program using the --htmlout option. No other specific mitigations are provided. Patch status is not explicitly confirmed in the advisory; users should consult the Red Hat advisory for the latest remediation guidance.