libxml2:html: Global-buffer-overflow in htmlParseHTMLAttribute

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5788673912995840 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: html Job Type: libfuzzerasani386libxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2194)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : libxml2 (EulerOS-SA-2023-2194)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occur...

libxml2:xml: Global-buffer-overflow in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4699711567953920 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasani386libxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

Security Bulletin: CVE-2023-29469 may affect IBM CICS TX Advanced 10.1

Summary CVE-2023-29469 may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced 10.1 has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-29469 DESCRIPTION: GNOME libxml2 is vulnerable to a denial of service, caused by a double free flaw in the xmlDictComputeFastKey function d...

Security Bulletin: CVE-2023-28484 may affect IBM CICS TX Advanced 10.1

Summary CVE-2023-28484 may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced 10.1 has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-28484 DESCRIPTION: GNOME libxml2 is vulnerable to a denial of service, caused by a NULL pointer dereference flaw in the...

Ubuntu: Security Advisory (USN-6028-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6028-2: libxml2 vulnerabilities

USN-6028-1 fixed vulnerabilities in libxml2. This update provides the corresponding updates for Ubuntu 23.04. Original advisory details: It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash. CVE-2022-2309 It was discovere...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2039)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2091)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.11.1 : libxml2 (EulerOS-SA-2023-2039)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

Ubuntu 23.04 : libxml2 vulnerabilities (USN-6028-2)

The remote Ubuntu 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6028-2 advisory. USN-6028-1 fixed vulnerabilities in libxml2. This update provides the corresponding updates for Ubuntu 23.04. Tenable has extracted the preceding description...

EulerOS Virtualization 2.11.0 : libxml2 (EulerOS-SA-2023-2091)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

Critical Photon OS Security Update - PHSA-2023-5.0-0018

Updates of 'libtiff', 'cups', 'openssh', 'libxml2', 'dmidecode' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0018

Updates of 'libxml2', 'libtiff', 'cups', 'dmidecode', 'openssh' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0008

Updates of 'libxml2' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0008

Updates of 'libxml2' packages of Photon OS have been released...

PT-2023-8412 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.4 iOS versions prior to 16.5 iPadOS versions prior to 16.5 libxml2 affected versions not specified Description: The issue is related to multiple memory corruption problems, including a buffer overflow in the libxml2...

FreeBSD : electron -- vulnerability (b09d77d0-b27c-48ae-b69b-9641bb68b39e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b09d77d0-b27c-48ae-b69b-9641bb68b39e advisory. - An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML...

Tenable Nessus < 10.5.2 Multiple Vulnerabilities (TNS-2023-20)

Tenable Nessus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessus"; ifdescripti...