Out-Of-Bounds Read

mingw32-libxml2m is vulnerable to out-of-bounds read. It allows an attacker to send a malicious XML file that, when opened in an application linked against libxml2, would cause the application to crash...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service. Two heap-based buffer overflow flaws were found in the way libxml2 decoded certain XML files. A remote attacker could provide a specially-crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash o...

Denial Of Service (DoS)

Libxml2 is vulnerable to denial of service DoS. The attack is possible because of heap-based buffer overflow in the way libxml2 handled documents that enable entity expansion. A remote attacker could provide a large, specially-crafted XML file that, when opened in an application linked against...

EulerOS 2.0 SP2 : libxml2 (EulerOS-SA-2019-1315)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A null pointer dereference vulnerability exists in the xpath function of libxml2 when parsing invalid XPath expression. Applications processing...

EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2019-1316)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A null pointer dereference vulnerability exists in the xpath function of libxml2 when parsing invalid XPath expression. Applications processing...

EulerOS Virtualization 2.5.4 : libxml2 (EulerOS-SA-2019-1211)

According to the version of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacke...

openSUSE Security Update : libxml2 (openSUSE-2019-785)

This update for libxml2 fixes the following security issues : - CVE-2018-9251: The xzdecomp function allowed remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint bsc1088279 - CVE-2018-14567: Prevent denial o...

SUSE SLES11 Security Update : libxml2 (SUSE-SU-2019:13985-1)

This update for libxml2 fixes the following issues : Security issue fixed : CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval function when parsing an invalid XPath expression in the XPATHOPAND or XPATHOPOR case leading to a denial of service attack bsc1102046 Other Issue...

SUSE-SU-2019:13985-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issue fixed: - CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval function when parsing an invalid XPath expression in the XPATHOPAND or XPATHOPOR case leading to a denial of service attack bsc1102046 Other Issue...

The vulnerability of the xz_decomp function in the libxml2 library, which allows a hacker to trigger a service failure.

The vulnerability of the xzdecomp function in the libxml2 library is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor, operating remotely, to cause service failures using a specially crafted XML file...

EulerOS 2.0 SP3 : libxml2 (EulerOS-SA-2019-1034)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentiall...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10902)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion...

rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment...

The vulnerability in the xpath.c:xmlXPathCompOpEval() function of the libxml2 library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability in the xpath.c:xmlXPathCompOpEval function of the libxml2 library is related to the dereferencing of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure...

Photon OS 1.0: Libxml2 PHSA-2018-1.0-0193

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0193. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Libxml2 PHSA-2017-0001

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0001. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121663;...

Photon OS 2.0: Libxml2 PHSA-2018-2.0-0106

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0106. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Libxml2 PHSA-2017-0039

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0039. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121739;...

Photon OS 1.0: Libxml2 PHSA-2017-0029

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0029. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121723;...

Photon OS 1.0: Libxml2 PHSA-2017-0024

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121711;...