7558 matches found
libxml2 - xmlDictAddString Heap Buffer Overread
Source: https://code.google.com/p/google-security-research/issues/detail?id=637 The following crash due to a heap-based out-of-bounds memory read can be observed in an ASAN build of latest stable libxml2 2.9.3, released 4 days ago, by feeding a malformed file to xmllint "$ ./xmllint --html...
libxml2 - xmlParseEndTag2 Heap Based Buffer Overread
Exploit for linux platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=638 The following crash due to a heap-based out-of-bounds memory read can be observed in an ASAN build of latest stable libxml2 2.9.3, released 4 days ago, by feeding a...
libxml2 - xmlParserPrintFileContextInternal Heap Based Buffer Overread
Exploit for linux platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=639 The following crash due to a heap-based out-of-bounds memory read can be observed in an ASAN build of latest stable libxml2 2.9.3, released 4 days ago, by feeding a...
libxml2 - xmlParseEndTag2 Heap Buffer Overread
Source: https://code.google.com/p/google-security-research/issues/detail?id=638 The following crash due to a heap-based out-of-bounds memory read can be observed in an ASAN build of latest stable libxml2 2.9.3, released 4 days ago, by feeding a malformed file to xmllint "$ ./xmllint /path/to/file...
AIX 6.1 TL 9 : libxml2 (IV80588)
The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...
AIX 7.1 TL 3 : libxml2 (IV80586)
The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...
libxml2 Denial of Service Vulnerability (CNVD-2016-01241)
Libxml2 is the GNOME project team developed a C-based language used to parse XML documents library , which supports a variety of encoding formats , Xpath parsing , Well-formed and valid validation and so on. A security vulnerability exists in Libxml2 that could be exploited by a remote attacker t...
AIX 7.2 TL 0 : libxml2 (IV80616)
The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...
AIX 5.3 TL 12 : libxml2 (IV80617)
The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...
Vulnerabilities in LibXML2 affect AIX,Vulnerabilities in LibXML2 affect VIOS
IBM SECURITY ADVISORY First Issued: Mon Feb 22 08:06:13 CST 2016 |Updated: Thu Aug 11 12:11:35 CDT 2016 |Update: Changed the iFix name for the AIX 7.1.3 fix. No changes relevant | to AIX 7.1.3 were made to the fix. The most recent version of this document is available here:...
Libxml2 Denial of Service Vulnerability (CNVD-2016-01133)
Libxml2 is the GNOME project team developed a C-based language used to parse XML documents library , which supports a variety of encoding formats , Xpath parsing , Well-formed and valid validation and so on. A security vulnerability exists in the 'htmlParseNameComplex' function in the HTMLparser....
[SECURITY] Fedora 22 Update: mingw-libxml2-2.9.3-1.fc22
MinGW Windows libxml2 XML processing library...
[SECURITY] Fedora 23 Update: mingw-libxml2-2.9.3-1.fc23
MinGW Windows libxml2 XML processing library...
Fedora Update for mingw-libxml2 FEDORA-2016-189
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
F5 Networks BIG-IP : Multiple libXML2 vulnerabilities (K61570943)
CVE-2015-5312 The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted XML data, a different vulnerability than CVE-2014-3660...
F5 BIG-IP - libXML2 vulnerabilities CVE-2015-7941 and CVE-2015-7942
The remote host is missing a security patch. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...
SOL61570943 - libXML2 vulnerabilities CVE-2015-7941 and CVE-2015-7942
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Out-of-bounds
The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service out-of-bounds read via a crafted XML document...
