Linux Distros Unpatched Vulnerability : CVE-2018-20592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Mini-XML aka mxml v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attackers could leverage this vulnerability to cau...

Fedora 28 : mxml (2019-d333d01e08)

Update to 3.0. License has changed to ASL 2.0 + exception. See https://github.com/michaelrsweet/mxml/releases/tag/v3.0 for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

CVE-2018-20592

CVE-2018-20592 affects Mini-XML (mxml) 2.12, with a use-after-free in mxmlAdd in mxml-node.c that can cause denial of service via a crafted XML file (as shown by mxmldoc). Connected sources indicate fixes in newer mxml releases (e.g., Fedora/Mageia advisories referencing updates to v3.0 and relat...