Use After Free

🗓️ 06 Feb 2024 12:32:55Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 32 Views

libxml2 Use After Free vulnerability in xmlTextReader module with crafted XML document parsing

Reporter	Title	Published	Views	Family All 254
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from kerberos 5, libxml2, go-jose, runc	3 Feb 202522:53	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability found in libxml2 package shipped with IBM CICS TX Advanced 10.1	29 Jan 202521:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libxml2 (CVE-2024-25062) affects Power HMC.	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Use After Free in the RHEL UBI (CVE-2024-25062)	27 Jun 202519:58	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service due to libxml2 (CVE-2024-25062)	29 Jan 202521:06	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in libxml2 affects Tivoli Netcool/OMNIbus (CVE-2024-25062)	17 Jul 202515:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.1.1	30 Sep 202416:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to GNOME libxml2 denial of service vulnerability [ CVE-2024-25062]	29 Jan 202520:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Use After Free in the RHEL UBI (CVE-2024-25062, CVE-2023-39615, CVE-2023-45322)	27 Jun 202520:01	–	ibm

Vulners

Node

xmlsoft libxml2Match2.11.1-r0cpp

AND

xmlsoft libxml2Match2.11.0-r0cpp

AND

xmlsoft libxml2Match2.11.2-r0cpp

AND

xmlsoft libxml2Match2.10.4-r2cpp

AND

xmlsoft libxml2Match2.11.6-r0cpp

AND

xmlsoft libxml2Match2.11.3-r0cpp

AND

xmlsoft libxml2Match2.11.4-r0cpp

AND

alpinelinux alpine_linuxMatch3.18

xmlsoft libxml2Match2.11.6-r0cpp

AND

xmlsoft libxml2Match2.11.5-r0cpp

AND

alpinelinux alpine_linuxMatch3.19

xmlsoft libxml2Match2.9.10-r6cpp

AND

xmlsoft libxml2Match2.9.10-r4cpp

AND

xmlsoft libxml2Match2.11.4-r0cpp

AND

xmlsoft libxml2Match2.11.3-r1cpp

AND

xmlsoft libxml2Match2.11.0-r0cpp

AND

xmlsoft libxml2Match2.11.1-r0cpp

AND

xmlsoft libxml2Match2.9.12-r3cpp

AND

xmlsoft libxml2Match2.10.3-r2cpp

AND

xmlsoft libxml2Match2.10.4-r1cpp

AND

xmlsoft libxml2Match2.9.12-r2cpp

AND

xmlsoft libxml2Match2.9.13-r0cpp

AND

xmlsoft libxml2Match2.11.2-r0cpp

AND

xmlsoft libxml2Match2.10.1-r0cpp

AND

xmlsoft libxml2Match2.11.5-r0cpp

AND

xmlsoft libxml2Match2.10.3-r1cpp

AND

xmlsoft libxml2Match2.10.0-r0cpp

AND

xmlsoft libxml2Match2.9.10-r7cpp

AND

xmlsoft libxml2Match2.11.3-r0cpp

AND

xmlsoft libxml2Match2.10.2-r0cpp

AND

xmlsoft libxml2Match2.9.10-r3cpp

AND

xmlsoft libxml2Match2.9.12-r1cpp

AND

xmlsoft libxml2Match2.9.14-r0cpp

AND

xmlsoft libxml2Match2.10.2-r1cpp

AND

xmlsoft libxml2Match2.11.6-r0cpp

AND

xmlsoft libxml2Match2.10.4-r2cpp

AND

xmlsoft libxml2Match2.9.14-r1cpp

AND

xmlsoft libxml2Match2.10.3-r0cpp

AND

alpinelinux alpine_linuxMatchedge

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r7cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r6cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r8cpp

AND

alpinelinux alpine_linuxMatch3.19

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.3-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.3-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r4cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r5cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.2-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.2-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r2cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r3cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r2cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r5cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.2-r2cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.2-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r2cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.3-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r0cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r1cpp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r0cpp

AND

alpinelinux alpine_linuxMatchedge

xmlsoft libxml2Match2.9.10+dfsg-6.2debian

AND

debian debian_linuxMatch999

xmlsoft libxml2Match2.9.10+dfsg-6.2debian

AND

debian debian_linuxMatch11

libxml2.so libxml2.soRange2.7.5–2.11.6cpp

nokogiri nokogiriRange1.0.0–1.15.5cpp

nokogiri nokogiriRange1.16.0–1.16.1cpp

Source	Link
github	www.github.com/GNOME/libxml2/commit/1a66b176055d25ee635bf328c7b35b381db0b71d
gitlab	www.gitlab.gnome.org/GNOME/libxml2/-/issues/604
github	www.github.com/advisories/GHSA-xc9x-jj77-9p9j
gitlab	www.gitlab.gnome.org/GNOME/libxml2/-/tags

05 Apr 2024 06:52Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.00165