Lucene search
K

83 matches found

NVD
NVD
added 2022/05/26 12:15 p.m.97 views

CVE-2021-42860

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxmlstringgetc:2611. NOTE: it is unclear whether this input is allowed by the API specification...

7.5CVSS0.0097EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/26 12:15 p.m.2 views

CVE-2021-42860

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxmlstringgetc:2611. NOTE: it is unclear whether this input is allowed by the API specification...

7.5CVSS7.3AI score0.0097EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/26 12:15 p.m.3 views

CVE-2021-42859

A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release...

7.5CVSS7.1AI score0.0097EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2022/05/26 12:15 p.m.25 views

CVE-2021-42859

A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release...

7.5CVSS7.1AI score0.0097EPSS
Exploits1References2
Prion
Prion
added 2022/05/26 12:15 p.m.12 views

Memory corruption

DISPUTED A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release...

5CVSS7.3AI score0.0097EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2022/05/26 12:15 p.m.69 views

CVE-2021-42860

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxmlstringgetc:2611. NOTE: it is unclear whether this input is allowed by the API specification...

7.5CVSS7.3AI score0.0097EPSS
Exploits1References2
OSV
OSV
added 2022/05/26 12:15 p.m.7 views

UBUNTU-CVE-2021-42859

DISPUTED A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release...

7.5CVSS5.8AI score0.0097EPSS
Exploits1References3
OSV
OSV
added 2022/05/26 12:15 p.m.6 views

UBUNTU-CVE-2021-42860

DISPUTED A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxmlstringgetc:2611. NOTE: it is unclear whether this input is allowed by the API specification...

7.5CVSS6AI score0.0097EPSS
Exploits1References3
Prion
Prion
added 2022/05/26 12:15 p.m.15 views

Stack overflow

DISPUTED A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxmlstringgetc:2611. NOTE: it is unclear whether this input is allowed by the API specification...

5CVSS7.6AI score0.0097EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/05/26 11:23 a.m.57 views

CVE-2021-42860

CVE-2021-42860 describes a stack-overflow in Mini-XML 3.2 when passing an unformed XML string to mxmlLoadString, triggering a stack-buffer-overflow in mxml_string_getc:2611. The vulnerability is documented across multiple sources (SUSE, OSV, NVD, etc.) with the same core flaw. The input’s legalit...

7.5CVSS7.6AI score0.0097EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/26 11:23 a.m.34 views

CVE-2021-42860

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxmlstringgetc:2611. NOTE: it is unclear whether this input is allowed by the API specification...

7.9AI score0.0097EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2022/05/26 11:23 a.m.8 views

CVE-2021-42860

A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack-buffer-overflow in mxmlstringgetc:2611. NOTE: it is unclear whether this input is allowed by the API specification...

7.5AI score0.0097EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2022/05/26 11:23 a.m.37 views

CVE-2021-42860

Removed by vendor...

7.5CVSS7.6AI score0.0097EPSS
Exploits1
Cvelist
Cvelist
added 2022/05/26 11:2 a.m.22 views

CVE-2021-42859

A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release...

7.6AI score0.0097EPSS
Exploits1References1
CVE
CVE
added 2022/05/26 11:2 a.m.63 views

CVE-2021-42859

Mini-XML v3.2 contains a memory leak that could lead to a denial of service. Several sources (CNVD-2022-68515, SUSE CVE-2021-42859, OSV, NVD) describe the issue as a memory leak with inconsistent testing results across 3.2 and Oct 2021 development code; one CNVD entry notes the leak stems from in...

7.5CVSS7.3AI score0.0097EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2022/05/26 11:2 a.m.28 views

CVE-2021-42859

Removed by vendor...

7.5CVSS7.6AI score0.0097EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2022/05/26 12:0 a.m.4 views

PT-2022-11716 · Mini-Xml · Mini-Xml

Name of the Vulnerable Software and Affected Versions: Mini-XML version 3.2 Description: A stack buffer overflow exists in Mini-XML. When inputting an unformed XML string to the "mxmlLoadString" API, it will cause a stack-buffer-overflow in mxml string getc. Note that it is unclear whether this...

7.5CVSS7.9AI score0.0097EPSS
Exploits1References9
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.5 views

Mini-XML 安全漏洞

Mini-XML is a small XML parser developed in C. A denial of service vulnerability exists in Mini-XML v3.2, which stems from the failure to validate input strings in mxmlLoadString and can be exploited by attackers to cause a denial of service...

7.5CVSS5.7AI score0.0097EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/05/26 12:0 a.m.6 views

PT-2022-11714 · Mini-Xml · Mini-Xml

Name of the Vulnerable Software and Affected Versions: Mini-XML version 3.2 Description: A memory leak issue was discovered that could cause a denial of service. Testing reports are inconsistent, with some testers seeing the issue in the 3.2 release, while others did not see the issue in this...

7.5CVSS7AI score0.0097EPSS
Exploits1References8
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.3 views

Mini-XML 安全漏洞

Mini-XML mxml is a small XML parser developed in C language. A security vulnerability exists in Mini-XML v3.2, which stems from a stack buffer overflow in mxmlstringgetc:2611 when feeding an unformatted XML string into the mxmlLoadString API...

7.5CVSS7.7AI score0.0097EPSS
Exploits1References2
Rows per page
Query Builder