Lucene search
+L

8332 matches found

CNVD
CNVD
•added 2018/02/09 12:00 a.m.•7 views

Google Chrome for Mac, Windows and Linux libxml2 Integer Overflow Vulnerability

Google Chrome for Mac, Windows and Linux is the United States Google Google company developed a Mac, Windows and Linux platform based on the Web browser. libxml2 is used in one of the C-based language used to parse the XML document library . An integer overflow vulnerability exists in the...

8.8CVSS8.8AI score0.02713EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2018/02/09 12:00 a.m.•38 views

SUSE SLES11 Security Update : libxml2 (SUSE-SU-2018:0395-1)

This update for libxml2 fixes several issues. Theses security issues were fixed : - CVE-2017-16932: Fixed infinite recursion could lead to an infinite loop or memory exhaustion when expanding a parameter entity in a DTD bsc1069689. - CVE-2017-15412: Prevent use after free when calling XPath...

8.8CVSS7.7AI score0.06452EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
•added 2018/02/09 12:00 a.m.•47 views

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2018:0401-1)

This update for libxml2 fixes one issue. This security issue was fixed : - CVE-2017-15412: Prevent use after free when calling XPath extension functions that allowed remote attackers to cause DoS or potentially RCE bsc1077993 - CVE-2016-5131: Use-after-free vulnerability in libxml2 allowed remote...

8.8CVSS8.3AI score0.02938EPSS
SaveExploits1References10
osv_suse
osv_suse
•added 2018/02/08 4:48 p.m.•9 views

SUSE-SU-2018:0401-1 Security update for libxml2

This update for libxml2 fixes one issue. This security issue was fixed: - CVE-2017-15412: Prevent use after free when calling XPath extension functions that allowed remote attackers to cause DoS or potentially RCE bsc1077993 - CVE-2016-5131: Use-after-free vulnerability in libxml2 allowed remote...

8.8CVSS7.7AI score0.02938EPSS
SaveExploits1References7
osv_suse
osv_suse
•added 2018/02/08 7:54 a.m.•12 views

SUSE-SU-2018:0395-1 Security update for libxml2

This update for libxml2 fixes several issues. Theses security issues were fixed: - CVE-2017-16932: Fixed infinite recursion could lead to an infinite loop or memory exhaustion when expanding a parameter entity in a DTD bsc1069689. - CVE-2017-15412: Prevent use after free when calling XPath...

8.8CVSS8AI score0.06452EPSS
SaveExploits1References9
Veracode
Veracode
•added 2018/02/08 2:39 a.m.•40 views

Copy-Paste Vulnerability Through LibXML2

Nokogiri and Chef are vulnerable to attacks through a copied version of LibXML2 within the codebase. LibXML2 before 2.9.5 is vulnerable to CVE-2017-15412 - LibXML2 contains a use-after-free bug in the xmlXPathCompOpEvalPositionPredicate method in xpath.c...

8.8CVSS8.5AI score0.02938EPSS
SaveExploits1
Photon
Photon
•added 2018/02/08 12:00 a.m.•59 views

Critical Photon OS Security Update - PHSA-2018-0106

Updates of 'salt' packages of Photon OS have been released...

9CVSS7.8AI score0.03232EPSS
SaveExploits0
osv_debian
osv_debian
•added 2018/02/07 11:29 p.m.•6 views

DEBIAN-CVE-2017-5130

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

8.8CVSS8AI score0.02713EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/02/07 11:29 p.m.•40 views

CVE-2017-5130

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

8.8CVSS6.5AI score
SaveExploits0References11
NVD
NVD
•added 2018/02/07 11:29 p.m.•33 views

CVE-2017-5130

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

8.8CVSS7.3AI score0.02713EPSS
SaveExploits0References11
osv_ubuntu
osv_ubuntu
•added 2018/02/07 11:29 p.m.•7 views

UBUNTU-CVE-2017-5130

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

8.8CVSS7.2AI score0.02713EPSS
SaveExploits0References3
Prion
Prion
•added 2018/02/07 11:29 p.m.•23 views

Integer overflow

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

6.8CVSS8.6AI score0.02713EPSS
SaveExploits0References11Affected Software3
UbuntuCve
UbuntuCve
•added 2018/02/07 11:29 p.m.•44 views

CVE-2017-5130

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

8.8CVSS7.2AI score0.02713EPSS
SaveExploits0References2
Mend
Mend
•added 2018/02/07 11:00 p.m.•5 views

CVE-2017-5130

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

8.8CVSS0.02713EPSS
SaveExploits0References14
CVE
CVE
•added 2018/02/07 11:00 p.m.•350 views

CVE-2017-5130

CVE-2017-5130 describes an integer overflow in libxml2’s xmlmemory.c that could enable a remote attacker to cause heap corruption via a crafted XML file. The vulnerability affects libxml2 up to version before 2.9.5 and has been observed in products such as Google Chrome (prior to 62.0.3202.62) an...

8.8CVSS6.6AI score0.02713EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
•added 2018/02/07 11:00 p.m.•44 views

CVE-2017-5130

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

8.8CVSS8.8AI score0.02713EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/07 12:00 a.m.•7 views

CVE-2017-5130: Out-of-bounds Write

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

8.8CVSS8.6AI score0.02713EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2018/02/06 12:00 a.m.•51 views

Debian: Security Advisory (DLA-1060-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.8AI score0.22981EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2018/01/31 12:00 a.m.•239 views

Fedora 27 : libxml2 (2018-db610fff5b)

Update to 2.9.7 which hopefully fixes all security issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

10CVSS7.3AI score0.08559EPSS
SaveExploits2References5
OpenVAS
OpenVAS
•added 2018/01/31 12:00 a.m.•89 views

Fedora Update for libxml2 FEDORA-2018-db610fff5b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.7AI score0.08559EPSS
SaveExploits5References2
Rows per page
Query Builder