USN-2875-1: libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service...

USN-2875-1 libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service...

Nokogiri gem contains a heap-based buffer overflow vulnerability in libxml2

Nokogiri version 1.6.7.2 has been released, pulling in several upstream patches to the vendored libxml2 to address the following CVE: CVE-2015-7499 CVSS v2 Base Score: 5.0 MEDIUM Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent...

Apple iOS libxml2 memory corruption vulnerability (CNVD-2016-00215)

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A security vulnerability exists in libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1. A remote attacker could exploit this vulnerability ...

Apple iOS libxml2 Memory Corruption Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A security vulnerability exists in libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1. A remote attacker could exploit this vulnerability ...

SUSE SLED11 / SLES11 Security Update : libxml2 (SUSE-SU-2016:0030-1)

This update fixes the following security issues : - CVE-2015-1819 Enforce the reader to run in constant memory bnc928193 - CVE-2015-7941 Fix out of bound read with crafted xml input by stopping parsing on entities boundaries errors bnc951734 - CVE-2015-7942 Fix another variation of overflow in...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2016:0049-1)

security update: This update fixes the following security issues : - CVE-2015-1819 Enforce the reader to run in constant memory bnc928193 - CVE-2015-7941 Fix out of bound read with crafted xml input by stopping parsing on entities boundaries errors bnc951734 - CVE-2015-7942 Fix another variation...

CVE-2015-7116

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7115...

Memory corruption

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7116...

CVE-2015-7115

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7116...

Memory corruption

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7115...

CVE-2015-7115

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7116...

CVE-2015-7116

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7115...

CVE-2015-7115

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7116...

CVE-2015-7115

CVE-2015-7115 affects libxml2 on Apple iOS < 9.2, OS X < 10.11.2, and tvOS

CVE-2015-7116

CVE-2015-7116 affects libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1. A crafted XML document may lead to information disclosure or memory corruption causing a denial of service. The issue is described as a remote-access vulnerability via XML parsing. Connected sources c...

CVE-2015-7116

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a crafted XML document, a different vulnerability than CVE-2015-7115...

SUSE-SU-2016:0049-1 Security update for libxml2

security update: This update fixes the following security issues: CVE-2015-1819 Enforce the reader to run in constant memory bnc928193 CVE-2015-7941 Fix out of bound read with crafted xml input by stopping parsing on entities boundaries errors bnc951734 CVE-2015-7942 Fix another variation of...

libxml2 Out-of-Bounds Memory Access Vulnerability

Libxml2 is an xml c language version of the parser , originally developed for the Gnome project tools , is a free open source software based on the MIT License. libxml2 has an out-of-bounds memory access vulnerability that allows an attacker to exploit the vulnerability to intrude by executing...

USN-2834-1 libxml2 vulnerability | Cloud Foundry

USN-2834-1 libxml2 vulnerability Medium Vendor libxml2 Versions Affected Ubuntu 14.04 Description Kostya Serebryany discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could...