Remote Code Execution (RCE)

libxml2 is vulnerable to remote code execution RCE attacks. The vulnerability exists through a heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10916)

According to its self-reported version number, the remote Juniper Junos device is affected by a Multiple vulnerabilities in libxml2: - Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.CVE-2016-4448 - Th...

EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2019-1007)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentiall...

libxml2/libxml2_xml_reader_for_file_fuzzer: Heap-double-free in xmlFreeID

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5633679915745280 Project: libxml2 Fuzzer: afllibxml2xmlreaderforfilefuzzer Fuzz target binary: libxml2xmlreaderforfilefuzzer Job Type: aflasanlibxml2 Platform Id: linux Crash Type:...

Fedora 28 : libxml2 (2018-3b782350ff)

Fix few CVEs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2018:3080-1)

This update for libxml2 fixes the following security issues : CVE-2018-9251: The xzdecomp function allowed remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint bsc1088279 CVE-2018-14567: Prevent denial of...

EulerOS 2.0 SP2 : libxml2 (EulerOS-SA-2018-1446)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentiall...

[SECURITY] Fedora 29 Update: python-lxml-4.2.5-1.fc29

lxml is a Pythonic, mature binding for the libxml2 and libxslt libraries. It provides safe and convenient access to these libraries using the ElementTre e It extends the ElementTree API significantly to offer support for XPath, Relax NG, XML Schema, XSLT, C14N and much more.To contact the project...

[SECURITY] Fedora 28 Update: rubygem-loofah-2.0.3-6.fc28

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments. It's built on top of Nokogiri and libxml2, so it's fast and has a nice API. Loofah excels at HTML sanitization XSS prevention. It includes some nice HTML sanitizers, which are based on HTML5lib's...

Null pointer vulnerability in libxml2 'xpath.c:xmlXPathCompOpEval()' function

Libxml2 is the GNOME project team developed a C-based language used to parse XML documents library , which supports a variety of encoding formats , Xpath parsing , Well-formed and valid validation and so on. A security vulnerability exists in the 'xpath.c:xmlXPathCompOpEval' function in libxml2...

XML External Entity (XXE)

libxml2.so is vulnerable to XML external entity attacks XXE. The XML parser allows parsing of external entities by default, enabling remote attackers to conduct XXE attacks through a crafted document...

libxml2/libxml2_xml_reader_for_file_fuzzer: Bad-free in xmlFreeNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5767146915758080 Project: libxml2 Fuzzer: afllibxml2xmlreaderforfilefuzzer Fuzz target binary: libxml2xmlreaderforfilefuzzer Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Bad-free Cras...

About the security content of watchOS 4.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Critical Photon OS Security Update - PHSA-2018-0193

Updates of 'libxml2', 'systemd' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0193

An update of 'systemd', 'libxml2' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0106

An update of 'libxml2', 'openjdk8' packages of Photon OS has been released...

The vulnerability of the xmlParseElementDecl function in parser.c of the libxml2 library allows a attacker to cause a service failure.

The vulnerability of the xmlParseElementDecl function in the parser.c file of the libxml2 library is related to buffer overflow in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially crafted file...

The vulnerability of the xmlStringLenDecodeEntities function (parser.c) in the libxml2 library allows a attacker to cause a service failure or disclose protected information.

The vulnerability of the xmlStringLenDecodeEntities function in the parser.c file of the libxml2 library is due to insufficient restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures or disclose protected informati...

The vulnerability of the xmlStringGetNodeList function in the libxml2 library allows a attacker to cause a service failure.

The vulnerability of the function xmlStringGetNodeList in the tree.c library from the libxml2 library is caused by an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure using a specially crafted XML file...

EulerOS Virtualization 2.5.0 : libxml2 (EulerOS-SA-2018-1336)

According to the version of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity...