UBUNTU-CVE-2019-20200

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature...

Heap overflow

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature...

UBUNTU-CVE-2019-20202

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent tries to use realloc on a block that was not allocated, leading to an invalid free and segmentation fault...

UBUNTU-CVE-2019-20198

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlentok mishandles recursion, leading to stack consumption for a crafted XML file...

UBUNTU-CVE-2019-20199

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen on a NULL pointer...

Null pointer dereference

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen on a NULL pointer...

Design/Logic Flaw

An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxmlparse functions mishandle XML entities, leading to an infinite loop in which memory allocations occur...

CVE-2019-20198

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlentok mishandles recursion, leading to stack consumption for a crafted XML file...

CVE-2019-20198

CVE-2019-20198 : The vulnerability is in ezXML versions 0.8.3–0.8.6 where the function ezxml_ent_ok() mishandles recursion, leading to stack consumption on a crafted XML file. Connected advisories confirm ezXML as the affected component and list CVE-2019-20198 among the issues addressed in netcdf...

CVE-2019-20198

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlentok mishandles recursion, leading to stack consumption for a crafted XML file...

CVE-2019-20199

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen on a NULL pointer...

CVE-2019-20199

CVE-2019-20199 affects ezXML 0.8.3–0.8.6. The vulnerability is in ezxml_decode: while parsing a crafted XML file, memory handling can cause a NULL pointer to be dereferenced when strlen() is applied to a NULL pointer. Product: ezXML library (versions 0.8.3 to 0.8.6). The issue can lead to a crash...

CVE-2019-20199

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen on a NULL pointer...

CVE-2019-20200

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature...

CVE-2019-20200

CVE-2019-20200 concerns ezXML versions 0.8.3–0.8.6, where ezxml_decode during XML parsing mishandles memory, causing a heap-based buffer over-read in the “normalize line endings” path. The issue is documented across multiple advisories (netcdf-related) and is referenced by several CVEs (e.g., CVE...

CVE-2019-20200

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the "normalize line endings" feature...

CVE-2019-20201

CVE-2019-20201 affects ezXML 0.8.3–0.8.6. The issue arises in the ezxml_parse_* functions, where XML entities are mishandled, causing an infinite loop that triggers repeated memory allocations. Exploitation details are not provided in the connected documents. The SUSE/Mageia/OpenVAS entries refer...

CVE-2019-20201

An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxmlparse functions mishandle XML entities, leading to an infinite loop in which memory allocations occur...

CVE-2019-20201

An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxmlparse functions mishandle XML entities, leading to an infinite loop in which memory allocations occur...

CVE-2019-20202

CVE-2019-20202 affects ezXML 0.8.3–0.8.6. The issue arises in the function ezxml_char_content() , which attempts to use realloc on a block that may not have been allocated, causing an invalid free and a segmentation fault. This is documented in multiple connected advisories (SUSE/OpenVAS/Nessus/M...