libxml2-devel vulnerabilities (Red Hat)
110 vulnerabilities.
libxml2-develRed Hatlibxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service ...6.5 Mediumlibxml2-develRed HatNokogiri NULL Pointer Dereference7.5 Highlibxml2-develRed HatUncontrolled resource consumption in nokogiri6.5 Mediumlibxml2-develRed HatThe xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote...5.3 Mediumlibxml2-develRed HatNokogiri gem, via libxml, is affected by DoS vulnerabilities8.8 Highlibxml2-develRed HatNokogiri does not forbid namespace nodes in XPointer ranges9.8 Criticallibxml2-develRed HatUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...8.8 Highlibxml2-develRed HatFormat string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact...9.8 Criticallibxml2-develRed HatXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...7.1 Highlibxml2-develRed HatThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...7.5 Highlibxml2-develRed HatHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...7.8 Highlibxml2-develRed HatThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2-develRed HatThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...5.5 Mediumlibxml2-develRed HatMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...5.5 Mediumlibxml2-develRed HatUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...5.5 Mediumlibxml2-develRed HatUse-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used...8.8 Highlibxml2-develRed HatHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...7.8 Highlibxml2-develRed HatThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2-develRed HatThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...7.5 Highlibxml2-develRed HatThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...7.5 Highlibxml2-develRed HatThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...8.1 Highlibxml2-develRed HatThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...5.0 Mediumlibxml2-develRed HatHeap-based buffer overflow in nokogiri5.0 Mediumlibxml2-develRed HatHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...5.0 Mediumlibxml2-develRed HatHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...5.0 Mediumlibxml2-develRed HatNokogiri subject to DoS via libxml2 vulnerability7.1 Highlibxml2-develRed HatThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...5.0 Mediumlibxml2-develRed HatThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...5.8 Mediumlibxml2-develRed HatThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...6.4 Mediumlibxml2-develRed HatThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...2.6 Lowlibxml2-develRed HatThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...6.8 Mediumlibxml2-develRed HatThe htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive...9.8 Criticallibxml2-develRed Hatlibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...4.3 Mediumlibxml2-develRed HatNokogiri vulnerable to libxml XML Entity Expansion5.0 Mediumlibxml2-develRed Hatparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...5.0 Mediumlibxml2-develRed HatThe xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web...4.3 Mediumlibxml2-develRed Hatparser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products...5.0 Mediumlibxml2-develRed Hatlibxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU...4.3 Mediumlibxml2-develRed HatHeap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0...6.8 Mediumlibxml2-develRed HatMultiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other...6.8 Mediumlibxml2-develRed HatOff-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products,...6.8 Mediumlibxml2-develRed Hatlibxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash...5.0 Mediumlibxml2-develRed HatHeap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote...7.5 Highlibxml2-develRed Hatlibxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial...5.0 Mediumlibxml2-develRed HatDouble free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote...6.8 Mediumlibxml2-develRed HatDouble free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote...7.5 Highlibxml2-develRed HatOff-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute...9.3 Highlibxml2-develRed HatInteger overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1...9.3 Highlibxml2-develRed HatDouble free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8...7.5 Highlibxml2-develRed Hatlibxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier,...4.3 Medium- Show moreLoading…