7898 matches found
EUVD-2022-56024
Nokogiri versions before 1.13.5 contain an integer overflow vulnerability in packaged libxml2 buffer handling functions that allows attackers to cause out-of-bounds memory writes. Attackers can exploit this by crafting multi-gigabyte XML files to trigger buffer overflows resulting in information...
CVE-2022-50999
CVE-2022-50999 has been rejected as a duplicate of CVE-2022-29824 . The underlying flaw is an integer overflow in the buffer handling functions (xmlBuf* in buf.c, xmlBuffer* in tree.c) of the packaged libxml2 shipped with Nokogiri (Ruby gem) versions before 1.13.5 . By submitting a crafted multi-...
EUVD-2022-56023
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
EUVD-2021-34866
Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...
CVE-2022-50998
Removed by vendor...
CVE-2021-47996
Nokogiri before 1.11.4 (CRuby implementation using its packaged/vendored libxml2 2.9.10 ) is affected by multiple vulnerabilities in that bundled library, including a memory leak in xmlSchemaValidateStream, a global buffer over-read in xmlEncodeEntitiesInternal, a heap-based buffer overflow, and ...
CVE-2021-47996
...
CVE-2021-47996
Removed by vendor...
CVE-2022-50998
CVE-2022-50998 affects Nokogiri before version 1.13.9 (CRuby implementation using packaged libraries), which bundles libxml2 v2.9.14 . The bundled library is vulnerable to data corruption/double-free from an entity reference cycle (CVE-2022-40304) and integer overflows when parsing with XML_PARSE...
CVE-2022-50998 Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
EulerOS Virtualization 2.13.1 : libxml2 (EulerOS-SA-2026-3183)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function...
EulerOS Virtualization 2.13.0 : libxml2 (EulerOS-SA-2026-3223)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function...
PT-2026-81342
Nokogiri before 1.18.8 packages a vulnerable version of libxml2 before 2.13.8 that contains a heap-based buffer under-read CVE-2025-32415 in the xmlSchemaIDCFillNodeTables function in xmlschemas.c. The issue can be triggered when validating against an untrusted XML Schema, or when validating...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues
Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2024-34459...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libxml2: libxml2-16-2.15.3-0.1.3.hum1 aarch64, x8664 libxml2-2.15.3-0.1.3.hum1 aarch64, x8664 libxml2-devel-2.15.3-0.1.3.hum1 aarch64, x8664 libxml2-static-2.15.3-0.1.3.hum1 aarch64, x8664...
libxml2: libxml2: NULL pointer dereference parsing nextCatalog without catalog attribute
A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the XML catalog parsing process when a nextCatalog element lacks the required catalog attribute. An attacker can cause the application to crash by supplying a specially crafted XML catalog file to an...