libxml2/libxml2_xml_reader_for_file_fuzzer: Bad-free in xmlFreeNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5767146915758080 Project: libxml2 Fuzzer: afllibxml2xmlreaderforfilefuzzer Fuzz target binary: libxml2xmlreaderforfilefuzzer Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Bad-free Cras...

About the security content of watchOS 4.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Critical Photon OS Security Update - PHSA-2018-0193

Updates of 'libxml2', 'systemd' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0193

An update of 'systemd', 'libxml2' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0106

An update of 'libxml2', 'openjdk8' packages of Photon OS has been released...

The vulnerability of the xmlParseElementDecl function in parser.c of the libxml2 library allows a attacker to cause a service failure.

The vulnerability of the xmlParseElementDecl function in the parser.c file of the libxml2 library is related to buffer overflow in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially crafted file...

The vulnerability of the xmlStringLenDecodeEntities function (parser.c) in the libxml2 library allows a attacker to cause a service failure or disclose protected information.

The vulnerability of the xmlStringLenDecodeEntities function in the parser.c file of the libxml2 library is due to insufficient restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures or disclose protected informati...

The vulnerability of the xmlStringGetNodeList function in the libxml2 library allows a attacker to cause a service failure.

The vulnerability of the function xmlStringGetNodeList in the tree.c library from the libxml2 library is caused by an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure using a specially crafted XML file...

Ubuntu: Security Advisory (USN-3504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3739-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.5.0 : libxml2 (EulerOS-SA-2018-1336)

According to the version of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity...

openSUSE: Security Advisory for libxml2 (openSUSE-SU-2018:3110-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-3513-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

About the security content of iTunes 12.7 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Copy-Paste Vulnerability (CPV) Through Libxml2

nokogiri is vulnerable to denial of service DoS attacks. The library uses a vulnerable version of libxml2, causing it to be vulnerable to the following CVEs: 1. CVE-2016-9318: XML External Entity XXE through a crafted document. 2. CVE-2017-16932: Infinite Recursion during parsing. 3...

openSUSE Security Update : libxml2 (openSUSE-2018-1150)

This update for libxml2 fixes the following security issues : - CVE-2018-9251: The xzdecomp function allowed remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint bsc1088279 - CVE-2018-14567: Prevent denial o...

openSUSE Security Update : libxml2 (openSUSE-2018-1149)

This update for libxml2 fixes the following security issues : - CVE-2018-9251: The xzdecomp function allowed remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint bsc1088279. - CVE-2018-14567: Prevent denial ...

openSUSE: Security Advisory for libxml2 (openSUSE-SU-2018:3107-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libxml2 (moderate)

This update for libxml2 fixes the following security issues: - CVE-2018-9251: The xzdecomp function allowed remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint bsc1088279 - CVE-2018-14567: Prevent denial of...

Security update for libxml2 (moderate)

This update for libxml2 fixes the following security issues: - CVE-2018-9251: The xzdecomp function allowed remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint bsc1088279. - CVE-2018-14567: Prevent denial o...