Lucene search
K

7 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:12 a.m.1 views

SUSE CVE-2015-8242

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service stack-based buffer over-read and application crash or obtain sensitive information via crafted XML data...

5.8CVSS8.6AI score0.00972EPSS
Exploits0References10
Veracode
Veracode
added 2018/08/01 7:29 a.m.22 views

Buffer Over-read

libxml2.so is vulnerable to buffer over-reads. A malicious user can pass an XML file to the xmlSAX2TextNode function in SAX2.c to cause a buffer over-read that can crash the application or reveal sensitive information in the memory...

5.8CVSS9AI score0.00972EPSS
Exploits0References28Affected Software2
NVD
NVD
added 2015/12/15 9:59 p.m.14 views

CVE-2015-8242

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service stack-based buffer over-read and application crash or obtain sensitive information via crafted XML data...

5.8CVSS7.2AI score0.00972EPSS
Exploits0References27
Prion
Prion
added 2015/12/15 9:59 p.m.23 views

Stack overflow

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service stack-based buffer over-read and application crash or obtain sensitive information via crafted XML data...

5.8CVSS7AI score0.00972EPSS
Exploits0References27Affected Software12
CVE
CVE
added 2015/12/15 9:0 p.m.112 views

CVE-2015-8242

CVE-2015-8242 affects libxml2 prior to 2.9.3. The xmlSAX2TextNode function in SAX2.c within the push interface of the HTML parser can cause a stack-based buffer over-read when processing crafted XML data, leading to a denial of service (application crash) and potential exposure of sensitive infor...

5.8CVSS6.8AI score0.00972EPSS
Exploits0References27Affected Software1
RedHat Linux
RedHat Linux
added 2015/12/07 10:13 a.m.3 views

libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information...

5.8CVSS7.2AI score0.00972EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2015/11/18 12:0 a.m.17 views

CVE-2015-8242

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service stack-based buffer over-read and application crash or obtain sensitive information via crafted XML data...

5.8CVSS7.3AI score0.00972EPSS
Exploits0References2
Rows per page
Query Builder