CVE-2019-18853

ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XMLPARSEHUGE is not properly restricted in coders/svg.c, related to SVG and libxml2...

CVE-2019-18853

ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XMLPARSEHUGE is not properly restricted in coders/svg.c, related to SVG and libxml2...

CVE-2019-18853: Uncontrolled Recursion

ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XMLPARSEHUGE is not properly restricted in coders/svg.c, related to SVG and libxml2...

EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2019-2211)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - dict.c in libxml2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via an unexpected...

CVE-2017-15412

A use-after-free flaw was found in the libxml2 library. An attacker could use this flaw to cause an application linked against libxml2 to crash when parsing a specially crafted XML file...

Memory Corruption Vulnerability in Apple macOS Catalina, tvOS and iOS libxml2 Components

Apple macOS Catalina is the United States Apple Apple company's set of specialized operating system developed for Mac computers. libxml2 is one of the C-based library components used to parse XML documents . A security vulnerability exists in the libxml2 component in Apple macOS Catalina versions...

Apple iOS, Apple tvOS, and Apple macOS Catalina libxml2 Component Memory Corruption Vulnerability

Apple iOS is an operating system developed for mobile devices. tvOS is an operating system for smart TVs. apple macOS Catalina is a specialized operating system developed for Mac computers. libxml2 is a C-based library component used to C-based library component for parsing XML documents. A...

[SECURITY] Fedora 31 Update: libxslt-1.1.33-4.fc31

This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. To use it you need to have a version of libxml2 =3D 2.6.27 installed. The xsltproc command is a command line interface to the XSLT eng ine...

PT-2019-4436

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.9-0 Description The issue is related to the implementation of XML PARSE HUGE in the ImageMagick console graphic editor, specifically in the coders/svg.c file, and is connected to insufficient input validation...

CVE-2018-14404

A null pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval function of libxml2 when parsing invalid XPath expression. Applications processing untrusted XSL format inputs with the use of libxml2 library may be vulnerable to denial of service attack due to crash of the...

Security Bulletin: IBM Netezza Analytics (CVE-2014-0191)

Summary Open Source libxml2 reported in May 2014 X-Force Report Vulnerability Details CVEID: CVE-2014-0191 DESCRIPTION: Libxml2 is vulnerable to a denial of service, caused by the expansion of internal entities within the xmlParserHandlePEReference function. A remote attacker could exploit this...

Security Bulletin: Multiple vulnerabilities in XMLsoft Libxml2 and OpenSSL affect IBM Netezza Analytics

Summary XMLsoft Libxml2 and OpenSSL are consumed by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-16932 DESCRIPTION: Xmlsoft libxml2 is vulnerable to a denial of service, caused by an infinite recursion issue in parameter...

KLA11592 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service. Below is a complete list of vulnerabilities: 1. Vulnerabilitiy in WebKit can be exploited remotely via...

KLA11593 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service. Below is a complete list of vulnerabilities: 1. Vulnerabilitiy in WebKit can be exploited remotely via...

About the security content of iCloud for Windows 10.7

About the security content of iCloud for Windows 10.7 This document describes the security content of iCloud for Windows 10.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Amazon Linux 2 : libxml2 (ALAS-2019-1301)

xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free an...

Medium: libxml2

Issue Overview: xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service...

libxml2:libxml2_xml_reader_for_file_fuzzer: Heap-use-after-free in xmlTextReaderFreeNodeList

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5654854260752384 Project: libxml2 Fuzzing Engine: afl Fuzz Target: libxml2xmlreaderforfilefuzzer Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

SUSE-SU-2019:14179-1 Security update for libxml2

This update for libxml2 doesn't fix any additional security issues, but correct its rpm changelog to reflect all CVEs that have been fixed over the past...

PT-2019-20191

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified Description The issue concerns an update for libxml2 that corrects its rpm changelog to reflect all security issues that have been fixed in the past. There is no information about the estimated number of...