614 matches found
ROS-20250806-06
Vulnerability in the libxml2 XML file parsing library is related to boundary checking errors in the shell xmllint - shell.c. Exploitation of the vulnerability could allow an attacker to execute arbitrary code on the target system...
AlmaLinux 8 : libxml2 (ALSA-2025:13203)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:13203 advisory. libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables CVE-2025-32415 Tenable has extracted the preceding description block directly from the AlmaLinux securit...
Alibaba Cloud Linux 3 : 0129: libxml2 (ALINUX3-SA-2025:0129)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0129 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-7425: A flaw was found in libxslt where th...
SUSE SLES15: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-tools / etc (SUSE-SU-2025:02620-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02620-1 advisory. - CVE-2025-7425: Fixed heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr bsc1246296 Tenable has extracted the precedi...
Advisory ROSA-SA-2025-2919
software: libxml2 2.9.14 OS: ROSA-CHROME unaffected versions = libxml2-2.9.14-7 affected versions libxml2-2.9.14-7 CVE-ID: CVE-2025-27113 BDU-ID: 2025-03138 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the xmlPatMatch function in the pattern.c file of the libxml2 library is related to null pointe...
Oracle Linux 8 : libxml2 (ELSA-2025-12450)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12450 advisory. - Fix CVE-2025-7425 RHEL-102797 - Fix CVE-2025-6021 RHEL-96498 - Fix CVE-2025-49794 RHEL-96398 Tenable has extracted the preceding description block directly...
Oracle Linux 9 : libxml2 (ELSA-2025-12447)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12447 advisory. 2.9.13-11 - Fix CVE-2025-7425 RHEL-102806 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
libxml2: Out-of-Bounds Read in libxml2
A flaw was found in libxml2. This vulnerability allows out-of-bounds memory access due to incorrect handling of return values in xmlPythonFileRead and xmlPythonFileReadRaw. This is caused by a mismatch between the length of the file in bytes vs the length in characters, as unicode characters can...
Azure Linux 3.0 Security Update: libxml2 (CVE-2025-6021)
The version of libxml2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6021 advisory. - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations ca...
CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-49796)
The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49796 advisory. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can...
CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-49794)
The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49794 advisory. - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under...
CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-6170)
The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6170 advisory. - A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When...
CBL Mariner 2.0 Security Update: libxml2 (CVE-2025-6021)
The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6021 advisory. - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations ca...
Azure Linux 3.0 Security Update: libxml2 (CVE-2025-49794)
The version of libxml2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49794 advisory. - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under...
Azure Linux 3.0 Security Update: libxml2 (CVE-2025-49796)
The version of libxml2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49796 advisory. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can...
CVE-2025-49796 affecting package libxml2 for versions less than 2.10.4-8
CVE-2025-49796 affecting package libxml2 for versions less than 2.10.4-8. A patched version of the package is available...
CVE-2025-6021 affecting package libxml2 for versions less than 2.10.4-8
CVE-2025-6021 affecting package libxml2 for versions less than 2.10.4-8. A patched version of the package is available...
CVE-2025-49794 affecting package libxml2 for versions less than 2.10.4-8
CVE-2025-49794 affecting package libxml2 for versions less than 2.10.4-8. A patched version of the package is available...