MiracleLinux 9 : libxml2-2.9.13-1.el9.1 (AXSA:2022-3979:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3979:05 advisory. libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write CVE-2022-29824 Tenable has extracted the preceding description block directly...

libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write

A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer types. A substantial input causes values to calculate buffer sizes to overflow, resulting in an out-of-bounds write...

CLSA-2022-1660064066 Fix CVE(s): CVE-2022-29824

SECURITY UPDATE: Integer overflows - debian/patches/CVE-2022-29824.patch: Fix integer overflows in xmlBuf and xmlBuffer in tree.c, buf.c - CVE-2022-29824...

CLSA-2022-1657816433 Fixed CVE-2022-29824 in libxml2

CVE-2022-29824: fix integer overflows in xmlBuf and xmlBuffer...

libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write

A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer types. A substantial input causes values to calculate buffer sizes to overflow, resulting in an out-of-bounds write...

RLSA-2022:5250 Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write CVE-2022-29824 For more details about the security issues, including the impact, a CVSS score,...

The vulnerabilities of the components buf.c and tree.c in the libxml2 library allow a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the buf.c and tree.c components of the libxml2 library is related to integer overflow when using the xmlBuf and xmlBuffer types. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code using specially created XML files...