libxml2 vulnerabilities (Red Hat)
110 vulnerabilities.
libxml2Red Hatlibxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service ...6.5 Mediumlibxml2Red HatNokogiri NULL Pointer Dereference7.5 Highlibxml2Red HatUncontrolled resource consumption in nokogiri6.5 Mediumlibxml2Red HatThe xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote...5.3 Mediumlibxml2Red HatNokogiri gem, via libxml, is affected by DoS vulnerabilities8.8 Highlibxml2Red HatNokogiri does not forbid namespace nodes in XPointer ranges9.8 Criticallibxml2Red HatUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...8.8 Highlibxml2Red HatFormat string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact...9.8 Criticallibxml2Red HatXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...7.1 Highlibxml2Red HatThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...7.5 Highlibxml2Red HatHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...7.8 Highlibxml2Red HatThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2Red HatThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...5.5 Mediumlibxml2Red HatMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...5.5 Mediumlibxml2Red HatUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...5.5 Mediumlibxml2Red HatUse-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used...8.8 Highlibxml2Red HatHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...7.8 Highlibxml2Red HatThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2Red HatThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...7.5 Highlibxml2Red HatThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...7.5 Highlibxml2Red HatThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...8.1 Highlibxml2Red HatThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...5.0 Mediumlibxml2Red HatHeap-based buffer overflow in nokogiri5.0 Mediumlibxml2Red HatHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...5.0 Mediumlibxml2Red HatHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...5.0 Mediumlibxml2Red HatNokogiri subject to DoS via libxml2 vulnerability7.1 Highlibxml2Red HatThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...5.0 Mediumlibxml2Red HatThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...5.8 Mediumlibxml2Red HatThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...6.4 Mediumlibxml2Red HatThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...2.6 Lowlibxml2Red HatThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...6.8 Mediumlibxml2Red HatThe htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive...9.8 Criticallibxml2Red Hatlibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...4.3 Mediumlibxml2Red HatNokogiri vulnerable to libxml XML Entity Expansion5.0 Mediumlibxml2Red Hatparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...5.0 Mediumlibxml2Red HatThe xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web...4.3 Mediumlibxml2Red Hatparser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products...5.0 Mediumlibxml2Red Hatlibxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU...4.3 Mediumlibxml2Red HatHeap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0...6.8 Mediumlibxml2Red HatMultiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other...6.8 Mediumlibxml2Red HatOff-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products,...6.8 Mediumlibxml2Red Hatlibxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash...5.0 Mediumlibxml2Red HatHeap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote...7.5 Highlibxml2Red Hatlibxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial...5.0 Mediumlibxml2Red HatDouble free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote...6.8 Mediumlibxml2Red HatDouble free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote...7.5 Highlibxml2Red HatOff-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute...9.3 Highlibxml2Red HatInteger overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1...9.3 Highlibxml2Red HatDouble free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8...7.5 Highlibxml2Red Hatlibxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier,...4.3 Medium- Show moreLoading…