| Name | CVE-2023-34194 |
| Description | StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-3701-1, ELA-1029-1 |
| Debian Bugs | 1059315 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| tinyxml (PTS) | jessie, jessie (lts) | 2.6.2-2+deb8u2 | fixed |
| stretch (security) | 2.6.2-4+deb9u1 | vulnerable |
| stretch (lts), stretch | 2.6.2-4+deb9u2 | fixed |
| buster (security), buster, buster (lts) | 2.6.2-4+deb10u2 | fixed |
| bullseye | 2.6.2-4+deb11u2 | fixed |
| bookworm | 2.6.2-6+deb12u1 | fixed |
| sid, trixie | 2.6.2-7 | fixed |
The information below is based on the following data on fixed versions.
Notes
https://www.forescout.com/resources/sierra21-vulnerabilities
Debian (non upstream) patch: https://salsa.debian.org/debian/tinyxml/-/raw/2366e1f23d059d4c20c43c54176b6bd78d6a83fc/debian/patches/CVE-2023-34194.patch