CVE-2024-34394

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes XmlNode::getlocalnamespaces on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code...

@128technology/ply (>=1.0.0-alpha.0, <=1.0.0-alpha.7), @128technology/yinz (5.0.0-alpha.6) +87 more potentially affected by CVE-2024-34394 via libxmljs2 (>=0.21.7, <=0.33.0)

libxmljs2 NPM version =0.21.7, =1.0.0-alpha.0, =5.0.0, =2.4.0, =1.14.0-rc.0, =1.0.0-beta.1, =3.0.0, =6.0.0-2020.8, =6.0.0-2020.12, =11.0.0-refactor-types.0, =6.0.0-2020.8, =6.0.0-2020.8, =0.186.0, =1.205.5 and more Source cves: CVE-2024-34394 Source advisory: OSV:GHSA-78H3-PG4X-J8CV...

CVE-2024-34394

CVE-2024-34394 affects libxmljs2. A type confusion occurs when parsing a specially crafted XML while invoking namespaces() on a grand-child node that refers to an entity (XmlNode::get_local_namespaces). Reported impact includes denial of service and remote code execution. Connected sources confir...

CVE-2024-34394 libxmljs2 namespaces type confusion RCE

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes XmlNode::getlocalnamespaces on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code...

CVE-2024-34394 libxmljs2 namespaces type confusion RCE

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes XmlNode::getlocalnamespaces on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code...