Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-3529HistorySep 12, 2008 - 4:56 p.m.
CVE-2008-3529
2008-09-1216:56:00
Debian Security Bug Tracker
security-tracker.debian.org
11
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.944 High
EPSS
Percentile
99.2%
Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libxml2 | <Â 2.6.32.dfsg-4 | libxml2_2.6.32.dfsg-4_all.deb |
| Debian | 11 | all | libxml2 | <Â 2.6.32.dfsg-4 | libxml2_2.6.32.dfsg-4_all.deb |
| Debian | 10 | all | libxml2 | <Â 2.6.32.dfsg-4 | libxml2_2.6.32.dfsg-4_all.deb |
| Debian | 999 | all | libxml2 | <Â 2.6.32.dfsg-4 | libxml2_2.6.32.dfsg-4_all.deb |
| Debian | 13 | all | libxml2 | <Â 2.6.32.dfsg-4 | libxml2_2.6.32.dfsg-4_all.deb |
Related
exploitpack
exploitpack
Apple Safari - RSS feed: Buffer Overflow via libxml2 (PoC)
2009-05-26 00:00:00
nessus
nessus
Oracle Linux 3 / 4 / 5 : libxml2 (ELSA-2008-0884)
2013-07-12 00:00:00
Solaris 10 (sparc) : 125731-15
2019-07-16 00:00:00
Solaris 10 (x86) : 125732-13 (deprecated)
2008-02-05 00:00:00
checkpoint_advisories
checkpoint_advisories
openvas
openvas
CentOS Update for libxml2 CESA-2008:0884 centos3 x86_64
2009-02-27 00:00:00
Debian: Security Advisory (DSA-1654-1)
2008-11-01 00:00:00
CentOS Update for libxml2 CESA-2008:0884 centos3 i386
2009-02-27 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2008-09-11 00:00:00
packetstorm
packetstorm
Safari RSS feed:// Buffer Overflow
2009-05-27 00:00:00
Netragard Security Advisory 2009-06-22
2009-06-23 00:00:00
redhat
redhat
(RHSA-2008:0884) Important: libxml2 security update
2008-09-11 00:00:00
(RHSA-2008:0886) Important: libxml2 security update
2008-09-11 00:00:00
seebug
seebug
Safari RSS feed:// Buffer Overflow via libxml2 Exploit PoC
2009-05-27 00:00:00
libxml XMLĺŽä˝ĺĺ çźĺ˛ĺşćş˘ĺşćźć´
2008-09-14 00:00:00
libxml XMLĺŽä˝ĺĺ 溢ĺşćźć´
2008-09-22 00:00:00
ubuntucve
ubuntucve
CVE-2008-3529
2008-09-12 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-11-09 03:48:07
debian
debian
[SECURITY] [DSA 1654-1] New libxml2 packages fix execution of arbitrary code
2008-10-14 18:04:50
securityvulns
securityvulns
prion
prion
Heap overflow
2008-09-12 16:56:00
osv
osv
libxml2 - execution of arbitrary code
2008-10-14 00:00:00
centos
centos
libxml2 security update
2008-09-11 20:48:40
libxml2 security update
2008-09-12 01:23:56
cve
cve
CVE-2008-3529
2008-09-12 16:56:00
exploitdb
exploitdb
Apple Safari - RSS 'feed://' Buffer Overflow via libxml2 (PoC)
2009-05-26 00:00:00
ubuntu
ubuntu
libxml2 vulnerabilities
2008-09-11 00:00:00
libxml2 vulnerabilities
2009-08-11 00:00:00
freebsd
freebsd
libxml2 -- two vulnerabilities
2008-08-22 00:00:00
vmware
vmware
Updated ESX packages for libxml2, ucd-snmp, libtiff
2008-10-31 00:00:00
Updated ESX packages for libxml2, ucd-snmp, libtiff
2008-10-31 00:00:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2008-12-02 00:00:00
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.944 High
EPSS
Percentile
99.2%
Related for DEBIANCVE:CVE-2008-3529