Lucene search
K

20 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the functions ezxml_str2utf8 and ezxmlParseStr in the ezxml.c component of the ezXML library for XML document syntax analysis allows a attacker to cause a service failure.

The vulnerability of the ezxmlstr2utf8 and ezxmlParseStr functions in the ezxml.c component of the ezXML XML syntax analysis library is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created XML file...

7.1CVSS6.5AI score0.0085EPSS
Exploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the ezxml_char_content function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmlcharcontent function in the XML document syntax analysis library ezXML involves the release of an incorrect pointer. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.1CVSS6.5AI score0.00405EPSS
Exploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the ezxml_parse_* function in the ezXML XML syntax analysis library allows a attacker to cause a service failure.

The vulnerability of the ezxmlparse function in the ezXML XML syntax analysis library involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

7.8CVSS6.5AI score0.00405EPSS
Exploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the ezxml_new function in the XML document syntax analysis library ezXML allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the ezxmlnew function in the XML document syntax analysis library ezXML is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

9.4CVSS7.8AI score0.00436EPSS
Exploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.00688EPSS
Exploits1References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.2 views

The vulnerability of the ezxml_new function in the XML document syntax analysis library ezXML allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the ezxmlnew function in the XML document syntax analysis library ezXML is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

8.8CVSS7.8AI score0.00436EPSS
Exploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.2 views

The vulnerability of the ezxml_toxml function in the XML document syntax analysis library ezXML allows a attacker to compromise data integrity and also cause service failures.

The vulnerability of the ezxmltoxml function in the XML document syntax analysis library ezXML is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service interruptions...

9.4CVSS7.8AI score0.00436EPSS
Exploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.00523EPSS
Exploits1References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the ezxml_internal_dtd function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmlinternaldtd function in the XML document syntax analysis library ezXML is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created XML file...

7.8CVSS6.5AI score0.01459EPSS
Exploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created XML file...

7.8CVSS7.5AI score0.00864EPSS
Exploits0References8Affected Software7
RedhatCVE
RedhatCVE
added 2022/05/20 10:45 p.m.21 views

CVE-2019-20006

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent puts a pointer to the internal address of a larger block as xml-txt. This is later deallocated using free, leading to a segmentation fault...

7.5CVSS2.6AI score0.00436EPSS
Exploits1References1
OSV
OSV
added 2022/05/17 8:15 p.m.2 views

UBUNTU-CVE-2022-30045

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap out-of-bounds read...

6.5CVSS6.6AI score0.00688EPSS
Exploits1References3
OSV
OSV
added 2021/04/24 5:15 p.m.1 views

DEBIAN-CVE-2021-31598

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...

7.5CVSS7.4AI score0.00864EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/24 12:0 a.m.3 views

ezXML 缓冲区错误漏洞

ezXML is a C library for parsing XML documents . A heap buffer overflow vulnerability exists in libezxml.a in ezXML version 0.8.6. The vulnerability stems from a memory handling error performed by the ezxmldecode function when parsing a specially crafted XML file. An attacker could exploit this...

7.5CVSS6AI score0.00864EPSS
Exploits0References8
CNVD
CNVD
added 2021/02/09 12:0 a.m.4 views

ezXML out-of-bounds write vulnerability (CNVD-2021-11062)

ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmltoxml function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...

8.1CVSS6.7AI score0.00436EPSS
Exploits1References1
OSV
OSV
added 2021/02/08 9:15 p.m.1 views

DEBIAN-CVE-2021-26221

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

8.1CVSS7.7AI score0.00436EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/02/08 12:0 a.m.2 views

ezXML 缓冲区错误漏洞

ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmltoxml function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...

8.1CVSS7.1AI score0.00436EPSS
Exploits1References6
CNVD
CNVD
added 2020/01/02 12:0 a.m.1 views

ezXML Invalid Release Vulnerability

ezXML is a C library for parsing XML documents . An invalid release vulnerability exists in ezXML. The vulnerability stems from an attempt by the ezxmlcharcontent function to use realloc on an unallocated block.An attacker could exploit this vulnerability to cause a segmentation error...

6.5CVSS6.9AI score0.00405EPSS
Exploits1References1
OSV
OSV
added 2019/12/31 9:15 p.m.2 views

DEBIAN-CVE-2019-20202

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault...

6.5CVSS6.3AI score0.00405EPSS
Exploits1References1
OSV
OSV
added 2019/12/31 9:15 p.m.1 views

UBUNTU-CVE-2019-20199

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen on a NULL pointer...

6.5CVSS6.6AI score0.00791EPSS
Exploits1References2
Rows per page
Query Builder