MiracleLinux 8 : libxml2-2.9.7-9.el8.2 (AXSA:2021-2193:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2193:02 advisory. libxml2: Use-after-free in xmlEncodeEntitiesInternal in entities.c CVE-2021-3516 libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal in...

libxml2:xml: Heap-use-after-free in xmlXIncludeDoProcess

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5450069193392128 Project: libxml2 Fuzzing Engine: afl Fuzz Target: xml Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x615000181708 Crash Stat...

libxml2:xml: Heap-use-after-free in xmlXIncludeCopyXPointer

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6233968358064128 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasani386libxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf50014c...

libxml2:xml: Heap-use-after-free in xmlFreeNodeList

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6014843229962240 Project: libxml2 Fuzzing Engine: afl Fuzz Target: xml Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61500003d618 Crash Stat...