Lucene search
K

22 matches found

OSV
OSV
added 2025/10/17 5:40 p.m.1 views

JLSEC-2025-68 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-fi...

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS7AI score0.00476EPSS
Exploits0References15
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.16 views

Oracle Linux 7 : libxml2 (ELSA-2020-3996)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3996 advisory. - Fix CVE-2019-19956 1793000 - Fix CVE-2019-20388 1810057 - Fix CVE-2020-7595 1810073 Tenable has extracted the preceding description block directly fr...

7.5CVSS7.1AI score0.00614EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:1 a.m.2 views

SUSE CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

4.3CVSS9.6AI score0.00476EPSS
Exploits0References62
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.81 views

AlmaLinux 8 : libxml2 (ALSA-2020:4479)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4479 advisory. - xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-oldNs. CVE-2019-19956 - xmlSchemaPreRun in...

7.5CVSS7AI score0.00614EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/11/04 2:12 a.m.5 views

libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS7.2AI score0.00476EPSS
Exploits0References4
AlmaLinux
AlmaLinux
added 2020/11/03 12:8 p.m.74 views

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c CVE-2019-19956 libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c CVE-2019-20388 libxml2: infinite loop i...

5CVSS0.9AI score0.00614EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2020/09/29 7:48 p.m.3 views

libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS7.2AI score0.00476EPSS
Exploits0References4
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:0 a.m.1 views

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

...

7.5CVSS6.9AI score0.00476EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2020/06/22 1:8 p.m.3 views

libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS7.2AI score0.00476EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/06/22 12:28 p.m.2 views

libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS7.2AI score0.00476EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2020/06/17 12:0 a.m.32 views

EulerOS 2.0 SP2 : libxml2 (EulerOS-SA-2020-1670)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388 - xmlStringLenDecodeEntities in...

7.5CVSS7AI score0.00614EPSS
Exploits0References4
CNVD
CNVD
added 2020/01/22 12:0 a.m.1 views

Libxml2 Infinite Loop Vulnerability

libxml2 is a library written in C for parsing XML documents . A security vulnerability exists in the xmlStringLenDecodeEntities of the parser.c file in libxml2 version 2.9.10. An attacker can exploit this vulnerability to cause an infinite loop...

7.5CVSS8.6AI score0.00476EPSS
Exploits0References1
OSV
OSV
added 2020/01/21 11:15 p.m.29 views

CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS8.8AI score
Exploits0References15
NVD
NVD
added 2020/01/21 11:15 p.m.20 views

CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS7.6AI score0.00476EPSS
Exploits0References15
Prion
Prion
added 2020/01/21 11:15 p.m.24 views

Design/Logic Flaw

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

5CVSS7.5AI score0.00476EPSS
Exploits0References15Affected Software11
UbuntuCve
UbuntuCve
added 2020/01/21 11:15 p.m.38 views

CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS6.8AI score0.00476EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2020/01/21 12:0 a.m.39 views

libxml -- multiple vulnerabilities

CVE mitre reports: CVE-2019-20388 xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. CVE-2020-7595 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. CVE-2020-24977 GNOME project libxml2...

7.5CVSS2.7AI score0.00697EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2019/12/12 12:0 a.m.4 views

PT-2019-5529

Name of the Vulnerable Software and Affected Versions libxml2 version 2.9.10 Description The issue is related to the xmlStringLenDecodeEntities function in the libxml2 library, which can lead to an infinite loop under certain end-of-file conditions. This could allow a remote attacker to cause a...

10CVSS8.1AI score0.20012EPSS
Exploits24References128
Veracode
Veracode
added 2018/08/08 2:2 a.m.19 views

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service attacks due to improper prevention of entity expansion in the xmlStringLenDecodeEntities function in parser.c. A context-dependent attacker is able to cause a denial of service by exhausting CPU using specially crafted XML data...

7.1CVSS8.6AI score0.01078EPSS
Exploits1References27Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/12/20 12:0 a.m.54 views

F5 Networks BIG-IP : libxml2 vulnerabilities (K24322529)

CVE-2016-4447 The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service heap-based buffer underread and application crash via a crafted file, involving xmlParseName. CVE-2016-4449 XML external entity XXE vulnerability in t...

7.5CVSS8.1AI score0.02658EPSS
Exploits1References3
Rows per page
Query Builder