7372 matches found
libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms
A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service...
libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode
A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML mixed content. This flaw causes the application to crash if an untrusted XML document is parsed in recovery mode and post validated. The highest threat from this vulnerability is to system...
SUSE-SU-2022:0802-2 Security update for python-libxml2-python
This update for python-libxml2-python fixes the following issues: - CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes bsc1196490...
Denial Of Service (DoS)
libxml2 is vulnerable to denial of service. The vulnerability exists due to an infinite recursion in parameter entities in parser.c which allows an attacker to cause a denial of service...
Denial Of Service (DoS)
libxml2 is vulnerable to denial of service. The vulnerability exists due to an integer overflow in xmlmemory.c...
CVE-2022-23308 affecting package libxml2 for versions less than 2.9.13-1
CVE-2022-23308 affecting package libxml2 for versions less than 2.9.13-1. An upgraded version of the package is available that resolves this issue...
Debian: Security Advisory (DLA-2972-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2972-1 : libxml2 - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2972 advisory. Five security issues have been discovered in libxml2: XML C parser and toolkit. CVE-2016-9318 Vulnerable versions do not offer a flag directly indicating that the...
[SECURITY] [DLA 2972-1] libxml2 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2972-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky April 08, 2022 https://wiki.debian.org/LTS -...
DLA-2972-1 libxml2 - security update
Bulletin has no description...
Security Bulletin: IBM QRadar Network Security is affected by an arbitrary code execution vulnerability (CVE-2016-4658)
Summary IBM QRadar Network Security is affected by a vulnerability in the libxml2 library that may allow arbitrary code execution. IBM QRadar Network Security has addressed this issue with a firmware update. Vulnerability Details CVEID: CVE-2016-4658 DESCRIPTION: The libxml2 library, as used in...
Important Photon OS Security Update - PHSA-2022-4.0-0167
Updates of 'libxml2', 'haproxy' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-0167
Updates of 'libxml2', 'haproxy' packages of Photon OS have been released...
The vulnerability of the valid.c file in the XML document analysis library libxml2, related to memory usage after deallocation, allows an attacker to execute arbitrary code.
The vulnerability of the valid.c file in the XML document analysis library libxml2 relates to memory usage after deallocation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially created XML file...
Fedora: Security Advisory for libxml2 (FEDORA-2022-050c712ed7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for python-libxml2-python (openSUSE-SU-2022:0802-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-23308 affecting package libxml2 2.9.12-1
CVE-2022-23308 affecting package libxml2 2.9.12-1. An upgraded version of the package is available that resolves this issue...
OESA-2022-1579 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
Vulnerability fixed in libxml2
A vulnerability has been fixed in libxml2. The vulnerability allows a remote malicious party the ability to cause a denial-of-service cause. The developers of libxml2 have released an update to fix the vulnerability: https://gitlab.gnome.org/GNOME/libxml2/-/commit...