libxml2 Resource Management Error Vulnerability

libxml2 is an open source library used to parse XML documents . It is written in C, and can be called for a variety of languages , such as C, C++, XSH. A resource management error vulnerability exists in libxml2 versions prior to 2.9.11. This vulnerability can be exploited to trigger post-release...

CVE-2021-3518

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability...

Denial of Service (DoS)

Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Denial of Service DoS. Vulnerable version of libxml2 was used. The fix to this updates the vendored libxml2 from v2.9.10 to v2.9.12 which addresses: - CVE-2019-20388 -...

libxml2 Null Pointer Dereference Vulnerability

libxml2 is a software library for parsing XML documents. A null pointer dereference vulnerability exists in libxml2 versions prior to 2.9.11. An attacker can exploit this vulnerability to crash a program via a specially crafted XML document...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service. The vulnerability exists because of heap-based buffer overflow in xmlEncodeEntitiesInternal in entities.c...

Remote Code Execution (RCE)

libxml2 is vulnerable to remote code execution. The vulnerability exists due to a use after free in libxml2 in xmlXIncludeDoProcess in xinclude.c...

PT-2021-4589

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.11 Description The issue is related to the libxml2 library's parser component, which fails to propagate errors when parsing XML content. This can be exploited by a remote attacker using a specially crafted XML...

The vulnerability of the libxml2 library in iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to execute arbitrary code.

The vulnerability of the libxml2 library in iOS, iPadOS, tvOS, watchOS, and macOS is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Arbitrary Code Execution

libxml2.so is vulnerable to arbitrary code execution. An integer overflow occurs when comparing schema dates. This could potentially result in arbitrary code execution on the host OS...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service DoS. The vulnerability exists through an infinite loop in xzdecomp function in xzlib.c...

Use-after Free

libxml2 is vulnerable to Use after free triggered by XPointer paths beginning with range-to...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service DoS. When ctxt-schema is NULL, it causes xmlSchemaValidateStream memory leak in xmlSchemaPreRun in xmlschemas.c...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service DoS. When ctxt-instate == XMLPARSEREOF, xmlParseStringEntityRef returns NULL , causing an infinite loop in the function xmlStringLenDecodeEntities in parser.c...

DEBIAN-CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

About the security content of iCloud for Windows 10.7 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Apple iOS, Apple tvOS, and Apple macOS Catalina libxml2 Component Memory Corruption Vulnerability

Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. apple macOS Catalina is a specialized operating system developed for Mac computers. libxml2 is a C-based library component used to C-based library component for parsing XML documents. A...

Information Disclosure

libxml2 is vulnerable to format string vulnerability, causing information disclosure...

Arbitrary Code Execution

libxml2 is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer overflow in the xmlStrncat function, causing arbitrary code execution attacks...

Denial Of Service (DoS) Through Double Free

mingw32-libxml2 is vulnerable to denial of service DoS. It is possible because it does not prevent parsing of malicious libxml2 with certain XPath XML Path Language expressions, causing an application to crash...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10902)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion...