Lucene search

CVE-2020-7595

🗓️ 21 Jan 2020 23:13:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 544 Views🌐 4 Media mentions

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop

Reporter	Title	Published	Views	Family All 152
UbuntuCve	CVE-2020-7595	21 Jan 202000:00	–	ubuntucve
Tenable Nessus	EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2020-1310)	23 Mar 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.2.2 : libxml2 (EulerOS-SA-2020-2228)	21 Oct 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : libxml2 (EulerOS-SA-2020-1768)	1 Jul 202000:00	–	nessus
Tenable Nessus	Photon OS 3.0: Libxml2 PHSA-2020-3.0-0055	6 Feb 202000:00	–	nessus
Tenable Nessus	Photon OS 1.0: Libxml2 PHSA-2020-1.0-0271	6 Feb 202000:00	–	nessus
Tenable Nessus	Fedora 31 : libxml2 (2020-41fe1680f6)	18 Feb 202000:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS : libxml2 vulnerabilities (USN-4274-1)	12 Feb 202000:00	–	nessus
Tenable Nessus	GLSA-202010-04 : libxml2: Multiple vulnerabilities	21 Oct 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libxml2 (ALAS-2020-1438)	27 Oct 202000:00	–	nessus

Nvd

Node

xmlsoft libxml2Match2.9.10

Node

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

fedoraproject fedoraMatch32

Node

canonical ubuntu_linuxMatch12.04-

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.10

Node

debian debian_linuxMatch9.0

Node

siemens sinema_remote_connect_serverRange<3.0

Node

netapp clustered_data_ontapMatch-

netapp smi-s_providerMatch-

netapp snapdriveMatch-windows

netapp steelstore_cloud_integrated_storageMatch-

netapp symantec_netbackupMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

oracle real_user_experience_insightMatch13.3.1.0

Node

oracle communications_cloud_native_core_network_function_cloud_native_environmentMatch1.10.0

oracle enterprise_manager_base_platformMatch13.4.0.0

oracle enterprise_manager_base_platformMatch13.5.0.0

oracle enterprise_manager_ops_centerMatch12.4.0.0

oracle mysql_workbenchRange≤8.0.26

oracle peoplesoft_enterprise_peopletoolsMatch8.58

oracle real_user_experience_insightMatch13.4.1.0

oracle real_user_experience_insightMatch13.5.1.0

Source	Link
security	www.security.gentoo.org/glsa/202010-04
lists	www.lists.debian.org/debian-lts-announce/2020/09/msg00009.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-103-08
gitlab	www.gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076
oracle	www.oracle.com/security-alerts/cpujul2022.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/
security	www.security.netapp.com/advisory/ntap-20200702-0005/
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Jan 2020 23:15Current

7.6High risk

Vulners AI Score7.6

CVSS25

CVSS37.5

EPSS0.003

CWE-835