Denial Of Service (DoS)

libxml2 is vulnerable to denial of service DoS. The vulnerability exists as the xmlParseElementDecl function can cause a heap-based buffer underread, causing a DoS attack...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service DoS. The vulnerability exists through the xmlStringGetNodeList function...

Information Disclosure

libxml2 is vulnerable to format string vulnerability, causing information disclosure...

Arbitrary Code Execution

libxml2 is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer overflow in the xmlStrncat function, causing arbitrary code execution attacks...

Out-Of-Bounds Read

mingw32-libxml2m is vulnerable to out-of-bounds read. It allows an attacker to send a malicious XML file that, when opened in an application linked against libxml2, would cause the application to crash...

Denial Of Service (DoS) Through Double Free

mingw32-libxml2 is vulnerable to denial of service DoS. It is possible because it does not prevent parsing of malicious libxml2 with certain XPath XML Path Language expressions, causing an application to crash...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service. Multiple flaws were found in the way libxml2 parsed certain XPath XML Path Language expressions. If an attacker were able to supply a specially-crafted XML file to an application using libxml2, as well as an XPath expression for that application to run...

Denial Of Service (DoS) CPU Consumption

mingw32-libxml2 is vulnerable to denial of service. The attack exists because it uses predictable hashing function causing intentional collisions and does not prevent the attacker inputing a malicious message to an XML service, resulting in longer processing time, which could lead to a denial of...

Heap-Based Buffer Overflow

mingw32-libxml2 is vulnerable to a heap-based buffer overflow. Due to a flaw in libxml2 which decods entity references with long names, it allows an attacker to provide a malicious XML file, causing an application crash and arbitrary code execution...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XPath expressions. If an attacker were able to supply a specially-crafted XML file to an application using libxml2, as well as an XPath...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service. Two heap-based buffer overflow flaws were found in the way libxml2 decoded certain XML files. A remote attacker could provide a specially-crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash o...

Denial Of Service (DoS)

Libxml2 is vulnerable to denial of service DoS. The attack is possible because of heap-based buffer overflow in the way libxml2 handled documents that enable entity expansion. A remote attacker could provide a large, specially-crafted XML file that, when opened in an application linked against...

EulerOS 2.0 SP2 : libxml2 (EulerOS-SA-2019-1315)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A null pointer dereference vulnerability exists in the xpath function of libxml2 when parsing invalid XPath expression. Applications processing...

EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2019-1316)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A null pointer dereference vulnerability exists in the xpath function of libxml2 when parsing invalid XPath expression. Applications processing...

EulerOS Virtualization 2.5.4 : libxml2 (EulerOS-SA-2019-1211)

According to the version of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacke...

openSUSE Security Update : libxml2 (openSUSE-2019-785)

This update for libxml2 fixes the following security issues : - CVE-2018-9251: The xzdecomp function allowed remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint bsc1088279 - CVE-2018-14567: Prevent denial o...

SUSE SLES11 Security Update : libxml2 (SUSE-SU-2019:13985-1)

This update for libxml2 fixes the following issues : Security issue fixed : CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval function when parsing an invalid XPath expression in the XPATHOPAND or XPATHOPOR case leading to a denial of service attack bsc1102046 Other Issue...

SUSE-SU-2019:13985-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issue fixed: - CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval function when parsing an invalid XPath expression in the XPATHOPAND or XPATHOPOR case leading to a denial of service attack bsc1102046 Other Issue...

The vulnerability of the xz_decomp function in the libxml2 library, which allows a hacker to trigger a service failure.

The vulnerability of the xzdecomp function in the libxml2 library is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor, operating remotely, to cause service failures using a specially crafted XML file...

EulerOS 2.0 SP3 : libxml2 (EulerOS-SA-2019-1034)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentiall...