CVE-2017-9047

A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlenbuf. If the content-type is...

CVE-2017-9049

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398...

CVE-2017-9050

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839...

Heap-based Buffer Overflow Through Embedded C Dependency

The nokogiri gem contains a libxml2 package which is vulnerable to heap-based buffer overflow. The vulnerability is due to CVE-2016-1839 which is caused when a malicious XML file is passed to xmllint in xmlDictAddString...

Heap-based Buffer Overflow Through Embedded C Dependency

nokogiri has a copied version of the libxml2 library. The copy that nokogiri includes is vulnerable to heap-based buffer overflow due to an incomplete fix for CVE-2016-1839. The buffer overflow is caused due to a flaw in the xmlDictAddString function in dict.c. This vulnerability in libxml2 is...

Multiple Stack Overflows Through Embedded C Dependency

nokogiri has a copied version of the Libxml2 library. Libxml2 is susceptible to 2 stack overflow vulnerabilities. The first is CVE-2017-9047. The function xmlSnprintfElementContent in valid.c does not recursively dump the element content definition into a char buffer buf of size size. When the...

Copy-Paste Vulnerability (CPV) Through Libxml2

nokogiri uses the libxml2 C library. The version that nokogiri uses is vulnerable to CVE-2016-1838 which allows a malicious user to pass a XML document to the application, triggering a heap-based buffer over-read causing it to crash. This is triggered through the xmlPArserPrintFileContextInternal...

Copy-Paste Vulnerability (CPV) Through Libxml2

nokogiri has a copied version of the libxml2 library. The copy that nokogiri includes is vulnerable to CVE-2017-8872 which allows attackers to cause a denial of service DoS or information disclosure via a buffer overflow. This is caused by the htmlParseTryOrFinish method in the HTMLparser.c file...

Fedora 25 : libplist (2017-4047180cd3)

Version 2.0.0 Changes : - New light-weight custom XML parser - Remove libxml2 dependency - Refactor binary plist parsing - Improved malformed XML and binary plist detection and error handling - Add parser debug/error output when compiled with --enable-debug, controlled via environment variables -...

PT-2017-3261

Name of the Vulnerable Software and Affected Versions libxml2 version 20904-GITv2.9.4-16-g0741801 Description The issue is caused by a heap-based buffer over-read in the xmlDictAddString function in dict.c. This can lead to a crash in programs that use libxml2, such as PHP. The vulnerability exis...

PT-2017-4229

Name of the Vulnerable Software and Affected Versions libxml2 version 20904-GITv2.9.4-16-g0741801 Description A buffer overflow issue was discovered in the xmlSnprintfElementContent function, which can cause programs using libxml2, such as PHP, to crash. The problem arises when the function...

PT-2017-4228

Name of the Vulnerable Software and Affected Versions libxml2 version 20904-GITv2.9.4-16-g0741801 Description The issue is related to a stack-based buffer overflow in the xmlSnprintfElementContent function in valid.c. This function is supposed to recursively dump the element content definition in...

PT-2017-3260

Name of the Vulnerable Software and Affected Versions libxml2 version 20904-GITv2.9.4-16-g0741801 Description The issue is caused by a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This can cause programs that use libxml2, such as PHP, to crash. The problem exists d...

libxml2 Denial of Service Vulnerability (CNVD-2017-07341)

Libxml2 is an XML C parser and toolkit developed for the Gnome project but available outside of the Gnome platform, and it is free software under the MIT license. A denial of service vulnerability exists in the htmlParseTryOrFinish function in HTMLparser.c in libxml2. A remote attacker could...

CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...

UBUNTU-CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...

Information disclosure

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...

CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...

CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...

CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...