623 matches found
DEBIAN-CVE-2019-20388
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...
About the security content of iCloud for Windows 10.7 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Apple iOS, Apple tvOS, and Apple macOS Catalina libxml2 Component Memory Corruption Vulnerability
Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. apple macOS Catalina is a specialized operating system developed for Mac computers. libxml2 is a C-based library component used to C-based library component for parsing XML documents. A...
Information Disclosure
libxml2 is vulnerable to format string vulnerability, causing information disclosure...
Arbitrary Code Execution
libxml2 is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer overflow in the xmlStrncat function, causing arbitrary code execution attacks...
Denial Of Service (DoS) Through Double Free
mingw32-libxml2 is vulnerable to denial of service DoS. It is possible because it does not prevent parsing of malicious libxml2 with certain XPath XML Path Language expressions, causing an application to crash...
Junos OS: Multiple vulnerabilities in libxml2 (JSA10902)
According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion...
Security Bulletin: Vulnerability in libxml2 affects IBM RackSwitch Products (CVE-2017-8872)
Summary IBM RackSwitch Products have addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM RackSwitch Products have addressed the following vulnerability in libxml2. Vulnerability Details: CVEID: CVE-2017-8872 Description: libxml2 is vulnerable to a buffer overflow,...
Security Bulletin: Vulnerability in libxml2 affects IBM Chassis Management Module (CVE-2016-9318)
Summary IBM Chassis Management Module has addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM Chassis Management Module has addressed the following vulnerability in libxml2. Vulnerability Details: CVEID: CVE-2016-9318 Description: Libxml2 could allow a remote...
Security Bulletin: Vulnerabilities in libxml2 and zlib affect IBM RackSwitch Products
Summary IBM RackSwitch Products listed below have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details Summary IBM RackSwitch Products listed below have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details: CVEID: CVE-2016-4658...
Heap-based Buffer Over-read
libxml2.so is vulnerable to heap-based buffer over-read. The xmlParseInternalSubset function does not return when the end of the internal subset is detected and input is processed further. This results in a heap-based buffer over-read which can lead to a denial of service...
The vulnerability of the xmlStringLenDecodeEntities function (parser.c) in the libxml2 library allows a attacker to cause a service failure or disclose protected information.
The vulnerability of the xmlStringLenDecodeEntities function in the parser.c file of the libxml2 library is due to insufficient restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures or disclose protected informati...
The vulnerability of the xmlStringGetNodeList function in the libxml2 library allows a attacker to cause a service failure.
The vulnerability of the function xmlStringGetNodeList in the tree.c library from the libxml2 library is caused by an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure using a specially crafted XML file...
CVE-2018-14567
libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251...
ALPINE-CVE-2018-14567
libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251...
libxml2: XML External Entity vulnerability
libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity XXE attacks via a crafte...
Heap-based Buffer Overflow
libxml2.so is vulnerable to heap-based buffer overflow. The xmlDictComputeFastQKey function in dict.c allows context-dependent attackers to obtain a negative offset in the name indexing that is used to randomize dictionary key generation. This can lead to a heap-based buffer overflow that results...
Denial Of Service (DoS)
libxml2.so is vulnerable to denial of service. A malicious user can pass an XML file to the xmlParseMarkupDecl function in parser.c to cause a buffer over-read that can crash the application or disclose sensitive information in the buffer...
Denial Of Service (DoS)
libxml2.so is vulnerable to denial of service DoS. The vulnerability exists due to the use-after-free errors occurring through the htmlParseChunk and xmldecldone functions...
Security Bulletin: Multiple vulnerabilities in libxml2 affect PowerKVM
Summary PowerKVM is affected by several vulnerabilities in libxml2. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-1819 DESCRIPTION: Libxml is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error in the xmlreader when processing XML...