Threats tagged 'ghsa-qvvp-v7hp-wr62'

A heap-based buffer overflow vulnerability exists in OpenSCAP when processing specially crafted XCCDF documents using the sds-compose option. This flaw can lead to memory corruption, causing the application to crash and resulting in a denial of service. Exploitation requires an administrator or automated workflow to process a malicious document, limiting exposure. No patch or mitigation currently meets Red Hat's criteria for deployment. The vulnerability is rated as medium severity with a CVSS score of 5.9.