Memory Leak

libxml2.so is vulnerable to Memory Leak. The vulnerability is due to use-after-free in the xmlUnlinkNode function in tree.c. An attacker could submit a crafted XML document, which would result in Denial of Service...

Denial Of Service (DoS)

libxml2.so is vulnerable to Denial of Service DoS attacks. The vulnerability exists in xmlSchemaFixupComplexType of xmlschemas.c, which allows a remote attacker to trigger a NULL pointer dereference leading to a segmentation fault, causing the application to crash...

Cross-site Scripting (XSS)

libxml2.so is vulnerable to cross-site scripting. The vulnerability exists in the htmlAttrDumpOutput function in HTMLtree.c due to a lack of sanitization in the escaped variable which allows an attacker to inject and execute malicious javascript...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service DoS. The attack is possible due to a lack of proper memory handing in the function xmlParseBalancedChunkMemoryRecover in parser.c, leading to an application crash...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service DoS attacks. The library does not make sure that the context of the objects in the stack is protected, causing an use-after-free bug that can crash the application...

Denial-of-Service (DoS)

libxml2.so is vulnerable to heap-based buffer overflow. The xmlParseXmlDecl function in parser.c allows context-dependent attackers to cause a denial of service condition when an encoding conversion failure occurs which causes the parser to extract more errors during the failure...

Buffer Over-read

libxml2.so is vulnerable to buffer over-reads. A malicious user can pass an XML file to the xmlSAX2TextNode function in SAX2.c to cause a buffer over-read that can crash the application or reveal sensitive information in the memory...

Remote Code Execution (RCE)

libxml2.so is vulnerable to remote code execution RCE attacks. The application does not forbid namespace nodes in XPointer ranges, allowing a malicious user to inject and execute arbitrary code...

Denial Of Service (DoS)

libxml2.so is vulnerable to denial of service DoS attacks. A malicious user can pass a XML file to the htmlParseName function in HTMLparser.c to cause a buffer overread that can crash the application...