GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

🗓️ 11 Sep 2020 07:00:00Reported by MicrosoftType

libxml2 v2.9.10 has a global buffer over-read in xmlEncodeEntitiesInternal fixed by commit 50f06b3e.

Reporter	Title	Published	Views	Family All 222
IBM Security Bulletins	Security Bulletin: IBM RackSwitch firmware products are affected by vulnerabilities in Libxml2	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 may affect IBM Storage Archive	26 Aug 202522:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Verify Access	7 Jan 202200:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
ALT Linux	Security fix for the ALT Linux 9 package libxml2 version 1:2.9.10-alt4	9 Nov 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package libxml2 version 1:2.9.10-alt4	6 Nov 202000:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : libxml2 (ALAS-2021-1662)	4 Jan 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libxml2 (ALAS-2023-1743)	4 May 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0018: libxml2 (ALINUX3-SA-2022:0018)	14 May 202500:00	–	nessus