7268 matches found
Astra Linux – Vulnerability in Colorod
There are two information disclosure vulnerabilities in colord, and they reside in colord/src/cd-device-db.c and colord/src/cd-profile-db.c, respectively. These vulnerabilities exist because the 'errmsg' of 'sqlite3exec' does not get released after use, whereas libxml2 requires that the caller mu...
Astra Linux – Vulnerability in libxml2
A issue was discovered in libxml2 before versions 2.11.7 and 2.12.x, and even before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to a use-after-free of the xmlValidatePopElement function...
Astra Linux – Vulnerability in libxml2
In libxml2 versions before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer do not check for integer overflows. This can lead to out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software that uses libxml2’s...
ROOT-OS-DEBIAN-11-CVE-2025-12863 CVE-2025-12863 in libxml2 - Patched by Root
Root has patched CVE-2025-12863 in the libxml2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6653 CVE-2026-6653 in libxml2 - Patched by Root
Root has patched CVE-2026-6653 in the libxml2 package for Root:Debian:11. Multiple fixed versions available...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31790 DESCRIPTION: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31790 DESCRIPTION: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a...
Unity Linux 20.1070e Security Update: libxml2 (UTSA-2026-099459)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099459 advisory. libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input...
Photon OS 5.0: Libxml2 PHSA-2026-5.0-92-0946
An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Libxml2 PHSA-2026-5.0-91-0874
An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Libxml2 PHSA-2026-5.0-90-0874
An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Libxml2 PHSA-2025-5.0-91-0673
An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0673. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Amazon Linux 2023 : libxml2, libxml2-devel, libxml2-static (ALAS2023-2026-1992)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1992 advisory. libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input using fixed-size stack buffers without...
Amazon Linux 2 : libxml2, --advisory ALAS2-2026-3827 (ALAS-2026-3827)
The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3827 advisory. libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershel...
Medium: libxml2
Issue Overview: libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long input line, an attacker can...
Medium: libxml2
Issue Overview: libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long input line, an attacker can...
SUSE-SU-2026:22894-1 Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the xmlcatalog utility when running in --shell mode bsc1269790...
SUSE-SU-2026:22806-1 Security update for libxml2
This update for libxml2 fixes the following issue - CVE-2026-11979: stack-based buffer overflows in the xmlcatalog utility when running in --shell mode bsc1269790...
Oracle Linux 10 : libxml2 (ELSA-2026-28234)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28234 advisory. - Fix CVE-2025-6170 RHEL-182007 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...
