libxml2 vulnerabilities (Debian)
130 vulnerabilities.
libxml2DebianxmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...7.5 Highlibxml2Debianlibxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service ...6.5 Mediumlibxml2DebianNokogiri NULL Pointer Dereference7.5 Highlibxml2DebianUncontrolled resource consumption in nokogiri6.5 Mediumlibxml2DebianNokogiri gem, via libxml, is affected by DoS vulnerabilities8.8 Highlibxml2Debianparser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro...9.8 Criticallibxml2DebianAn integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62...8.8 Highlibxml2DebianNokogiri gem, via libxml, is affected by DoS vulnerabilities7.5 Highlibxml2DebianBuffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an...9.8 Criticallibxml2DebianA flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the...9.8 Criticallibxml2DebianA remote code execution vulnerability in libxml2 could enable an attacker using a specially...7.8 Highlibxml2DebianOut-of-bounds read in nokogiri7.5 Highlibxml2Debianlibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the...7.5 Highlibxml2Debianlibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function...7.5 Highlibxml2DebianA buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function...7.5 Highlibxml2DebianThe htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a...9.1 Criticallibxml2Debian** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a...4.7 Mediumlibxml2DebianCVE-2016-9318 does not affect BellSoft software5.5 Mediumlibxml2DebianNokogiri does not forbid namespace nodes in XPointer ranges9.8 Criticallibxml2DebianUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...8.8 Highlibxml2DebianFormat string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact...9.8 Criticallibxml2DebianXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...7.1 Highlibxml2DebianThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...7.5 Highlibxml2DebianHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...7.8 Highlibxml2DebianThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2DebianThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...5.5 Mediumlibxml2DebianMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...5.5 Mediumlibxml2DebianUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...5.5 Mediumlibxml2DebianUse-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used...8.8 Highlibxml2DebianHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...7.8 Highlibxml2DebianThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2DebianThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...7.5 Highlibxml2DebianThe xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent...7.5 Highlibxml2DebianThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...7.5 Highlibxml2DebianDenial of service or RCE from libxml2 and libxslt7.5 Highlibxml2DebianThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...8.1 Highlibxml2DebianThe htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial...6.5 Mediumlibxml2DebianThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...5.0 Mediumlibxml2DebianHeap-based buffer overflow in nokogiri5.0 Mediumlibxml2DebianHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...5.0 Mediumlibxml2DebianHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...5.0 Mediumlibxml2DebianNokogiri subject to DoS via libxml2 vulnerability7.1 Highlibxml2DebianThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...5.0 Mediumlibxml2DebianThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...5.8 Mediumlibxml2DebianThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...6.4 Mediumlibxml2DebianThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...2.6 Lowlibxml2Debianlibxml2 - regression updateNo scorelibxml2DebianThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...6.8 Mediumlibxml2DebianThe htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive...9.8 Criticallibxml2Debianlibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...4.3 Medium- Show moreLoading…