275 matches found
CVE-2021-26220
The CVE-2021-26220 entry concerns the ezxml_toxml function in ezXML 0.8.6 and earlier, vulnerable to an out-of-bounds write when opening XML after memory pool exhaustion. Connected advisories (SUSE/Mageia/OpenVAS/Nessus) confirm ezXML-related issues in netcdf packages and indicate patches/updates...
ezXML 缓冲区错误漏洞
ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmltoxml function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...
ezXML 缓冲区错误漏洞
ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmlnew function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...
ezXML 缓冲区错误漏洞
ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmlnew function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...
CVE-2021-26221: Out-of-bounds Write
The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...
CVE-2021-26220: Out-of-bounds Write
The ezxmltoxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...
CVE-2021-26222: Out-of-bounds Write
The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...
ezXML Infinite Loop Vulnerability
ezXML is a C library for parsing XML documents . An infinite loop vulnerability exists in ezXML. The vulnerability stems from the ezxmlparse function not properly handling XML entities. An attacker can exploit this vulnerability to cause a denial of service via a malicious XML file...
ezXML Heap Buffer Over Read Vulnerability
ezXML is a C library for parsing XML documents . A heap buffer over-read vulnerability exists in ezXML. The vulnerability stems from the ezxmldecode function performing incorrect memory handling when parsing specially crafted XML files. An attacker could exploit this vulnerability to cause a deni...
ezXML Invalid Release Vulnerability
ezXML is a C library for parsing XML documents . An invalid release vulnerability exists in ezXML. The vulnerability stems from an attempt by the ezxmlcharcontent function to use realloc on an unallocated block.An attacker could exploit this vulnerability to cause a segmentation error...
ezXML Stack Overflow Vulnerability
ezXML is a C library for parsing XML documents . A stack overflow vulnerability exists in ezXML. The vulnerability stems from the ezxmlentok function not handling recursion correctly. An attacker could exploit this vulnerability via a specially crafted XML file to cause a denial of service...
DEBIAN-CVE-2019-20202
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault...
CVE-2019-20201
An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxmlparse functions mishandle XML entities, leading to an infinite loop in which memory allocations occur...
CVE-2019-20201
An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxmlparse functions mishandle XML entities, leading to an infinite loop in which memory allocations occur...
CVE-2019-20202
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault...
CVE-2019-20202
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault...
DEBIAN-CVE-2019-20201
An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxmlparse functions mishandle XML entities, leading to an infinite loop in which memory allocations occur...
CVE-2019-20200
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature...
CVE-2019-20199
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen on a NULL pointer...