USN-3513-1: libxml2 vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description It was discovered that libxml2 incorrecty handled certain files. An attacker could use this issue with specially constructed XML data to cause libxml2 to consume resources, leading to a denial of service...

The vulnerability of the NEXTL parser for XML files (parser.c) in the libxml2 library allows a hacker to inject XML entities.

The vulnerability of the NEXTL parser for XML files parser.c in the libxml2 library arises from an out-of-buffer operation in memory. Exploiting this vulnerability allows a malicious actor to inject XML entities through an intentionally crafted DTD name that contains the character “%”...

libxml2 xmlXPathCompOpEvalPositionalPredicate Memory Misreference Vulnerability

libxml2 is the GNOME project team developed a C-based library for parsing XML documents, which supports multiple encoding formats, Xpath parsing, Well-formed and valid validation. libxml2 xmlXPathCompOpEvalPositionalPredicate memory misreference vulnerability. An attacker could cause memory...

Debian DSA-4086-1 : libxml2 - security update

Nick Wellnhofer discovered that certain function calls inside XPath predicates can lead to use-after-free and double-free errors when executed by libxml2's XPath engine via an XSLT transformation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

[SECURITY] [DSA 4086-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4086-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4086-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4086-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2018 https://www.debian.org/security/faq -...

DSA-4086-1 libxml2 - security update

Bulletin has no description...

The vulnerability of the libxml2 library for analyzing XML files lies in its improper calculation of buffer size for port values, allowing attackers to execute arbitrary code or cause service failures.

The vulnerability of the libxml2 library for analyzing XML files is related to incorrect calculation of the buffer size for port values. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures remotely...

The vulnerability of the xmlDictAddString function in the dict.c library of the libxml2 library, which allows a hacker to cause a service failure.

The vulnerability of the xmlDictAddString function in the dict.c library of the libxml2 library arises from a read operation that occurs outside the buffer’s boundaries in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the xmlDictComputeFastKey function (dict.c) in the libxml2 library allows a attacker to cause a service failure.

The vulnerability of the xmlDictComputeFastKey function in the dict.c file of the libxml2 library arises from a read operation that occurs outside the buffer, within dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Debian: Security Advisory (DSA-4086-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libxml2/libxml2_xml_read_memory_fuzzer: Global-buffer-overflow in xmlParseQName

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6683819592646656 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type:...

Updated libxml2 packages fix security vulnerability

Integer overflow in memory debug code in libxml2 before 2.9.5 CVE-2017-5130. It was discovered that libxml2 incorrecty handled certain files. An attacker could use this issue with specially constructed XML data to cause libxml2 to consume resources, leading to a denial of service CVE-2017-15412...

Updated libxml2 & perl-XML-LibXML packages fix security vulnerabilities

Use-after-free error could lead to crash CVE-2016-4658. Use-after-free vulnerability in libxml2 through 2.9.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function CVE-2016-5131. libxml2 2.9.4 and earli...

MGASA-2018-0048 Updated libxml2 & perl-XML-LibXML packages fix security vulnerabilities

Use-after-free error could lead to crash CVE-2016-4658. Use-after-free vulnerability in libxml2 through 2.9.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function CVE-2016-5131. libxml2 2.9.4 and earli...

MGASA-2018-0050 Updated libxml2 packages fix security vulnerability

Integer overflow in memory debug code in libxml2 before 2.9.5 CVE-2017-5130. It was discovered that libxml2 incorrecty handled certain files. An attacker could use this issue with specially constructed XML data to cause libxml2 to consume resources, leading to a denial of service CVE-2017-15412...

Debian DLA-1211-1 : libxml2 security update

CVE-2017-15412 It was detected that some function calls in the XPath extensions functions could result in memory corruption due to 'use after free'. For Debian 7 'Wheezy', these problems have been fixed in version 2.8.0+dfsg1-7+wheezy12. We recommend that you upgrade your libxml2 packages. NOTE:...

[SECURITY] [DLA 1211-1] libxml2 security update

Package : libxml2 Version : 2.8.0+dfsg1-7+wheezy12 CVE ID : CVE-2017-15412 CVE-2017-15412 It was detected that some function calls in the XPath extensions functions could result in memory corruption due to "use after free". For Debian 7 "Wheezy", these problems have been fixed in version...

DLA-1211-1 libxml2 - security update

Bulletin has no description...

USN-3504-1: libxml2 vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Wei Lei discovered that libxml2 incorrecty handled certain parameter entities. An attacker could use this issue with specially constructed XML data to cause libxml2 to consume resources, leading to a deni...