Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-7839

Malware in sbrugna...

6.8CVSS8.1AI score0.01012EPSS
Exploits1References39
Tenable Nessus
Tenable Nessus
added 2016/02/23 12:0 a.m.45 views

AIX 7.1 TL 3 : libxml2 (IV80586)

The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...

6.8CVSS7.4AI score0.01012EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2016/02/23 12:0 a.m.44 views

AIX 5.3 TL 12 : libxml2 (IV80617)

The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities : - A heap-based buffer overflow condition exists in the xmlParseEntityDecl and xmlParseConditionalSections functions within file parser.c due to a failure to properly stop parsing invalid...

6.8CVSS7.4AI score0.01012EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2015/12/07 11:59 a.m.2 views

libxml2: heap-based buffer overflow in xmlParseConditionalSections()

A heap-based buffer overflow flaw was found in the way libxml2 parsed certain crafted XML input. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash causing a denial of service...

6.8CVSS7.4AI score0.01012EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2015/12/07 10:13 a.m.0 views

libxml2: heap-based buffer overflow in xmlParseConditionalSections()

A heap-based buffer overflow flaw was found in the way libxml2 parsed certain crafted XML input. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash causing a denial of service...

6.8CVSS7.4AI score0.01012EPSS
Exploits1References4
CNVD
CNVD
added 2015/11/19 12:0 a.m.1 views

libxml2 Denial of Service Vulnerability (CNVD-2015-07711)

libxml2 is an XML parser and markup toolset. A denial of service vulnerability exists in libxml2 version 2.9.2 that allows attackers to cause a denial of service by crafting the xmlParseEntityDecl or xmlParseConditionalSections functions of parserc in XML data...

4.3CVSS7.9AI score0.00434EPSS
Exploits0References1
OSV
OSV
added 2015/11/18 4:59 p.m.1 views

DEBIAN-CVE-2015-7942

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via crafted XML data, a different vulnerability than...

6.8CVSS7.7AI score0.01012EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2015/11/18 4:59 p.m.0 views

CVE-2015-7942

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via crafted XML data, a different vulnerability than...

6.8CVSS5.5AI score0.01012EPSS
Exploits1References31
Prion
Prion
added 2015/11/18 4:59 p.m.23 views

Out-of-bounds

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via crafted XML data, a different vulnerability than...

6.8CVSS6.5AI score0.01012EPSS
Exploits1References29Affected Software9
Cvelist
Cvelist
added 2015/11/18 4:0 p.m.22 views

CVE-2015-7942

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via crafted XML data, a different vulnerability than...

7.1AI score0.01012EPSS
Exploits1References29
CVE
CVE
added 2015/11/18 4:0 p.m.140 views

CVE-2015-7942

CVE-2015-7942 affects libxml2 and describes a denial-of-service/ crash caused by a heap-based buffer issue in the xmlParseConditionalSections function when parsing crafted XML data, leading to an out-of-bounds read. The initial document provides concrete details: vulnerable component is libxml2 (...

6.8CVSS6.6AI score0.01012EPSS
Exploits1References29Affected Software2
Cvelist
Cvelist
added 2015/11/18 4:0 p.m.27 views

CVE-2015-7941

libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service out-of-bounds read and libxml2 crash via crafted XML data to the 1 xmlParseEntityDecl or 2 xmlParseConditionalSections function in parser.c, as demonstrated by...

8.3AI score0.00434EPSS
Exploits0References22
OSV
OSV
added 2015/10/25 12:0 a.m.33 views

DLA-334-1 libxml2 - security update

Bulletin has no description...

6.8CVSS6.7AI score0.01012EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2015/10/23 12:0 a.m.4 views

PT-2015-3213

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified Description The issue is related to the xmlParseConditionalSections function in the libxml2 library, which can cause a denial of service due to an out-of-bounds read when parsing specially crafted XML...

10CVSS7.2AI score0.23686EPSS
Exploits37References138
UbuntuCve
UbuntuCve
added 2015/10/23 12:0 a.m.29 views

CVE-2015-7942

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via crafted XML data, a different vulnerability than...

6.8CVSS7.1AI score0.01012EPSS
Exploits1References2
OSV
OSV
added 2015/10/23 12:0 a.m.0 views

UBUNTU-CVE-2015-7942

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via crafted XML data, a different vulnerability than...

6.8CVSS7.1AI score0.01012EPSS
Exploits1References3
Rows per page
Query Builder