libxml2 vulnerabilities (SUSE)
95 vulnerabilities.
libxml2SUSEAn integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62...8.8 Highlibxml2SUSENokogiri gem, via libxml, is affected by DoS vulnerabilities7.5 Highlibxml2SUSEBuffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an...9.8 Criticallibxml2SUSEA flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the...9.8 Criticallibxml2SUSEA remote code execution vulnerability in libxml2 could enable an attacker using a specially...7.8 Highlibxml2SUSEOut-of-bounds read in nokogiri7.5 Highlibxml2SUSElibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the...7.5 Highlibxml2SUSElibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function...7.5 Highlibxml2SUSEA buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function...7.5 Highlibxml2SUSEThe htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a...9.1 Criticallibxml2SUSE** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a...4.7 Mediumlibxml2SUSEIt was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not...7.5 Highlibxml2SUSECVE-2016-9318 does not affect BellSoft software5.5 Mediumlibxml2SUSENokogiri does not forbid namespace nodes in XPointer ranges9.8 Criticallibxml2SUSEUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...8.8 Highlibxml2SUSEFormat string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact...9.8 Criticallibxml2SUSEXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...7.1 Highlibxml2SUSEThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...7.5 Highlibxml2SUSEHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...7.8 Highlibxml2SUSEThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2SUSEThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...5.5 Mediumlibxml2SUSEMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...5.5 Mediumlibxml2SUSEUse-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used...8.8 Highlibxml2SUSEHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...7.8 Highlibxml2SUSEThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2SUSEThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...7.5 Highlibxml2SUSEThe xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent...7.5 Highlibxml2SUSEThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...7.5 Highlibxml2SUSEDenial of service or RCE from libxml2 and libxslt7.5 Highlibxml2SUSEThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...8.1 Highlibxml2SUSEThe htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial...6.5 Mediumlibxml2SUSEThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...5.0 Mediumlibxml2SUSEHeap-based buffer overflow in nokogiri5.0 Mediumlibxml2SUSEHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...5.0 Mediumlibxml2SUSEHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...5.0 Mediumlibxml2SUSENokogiri subject to DoS via libxml2 vulnerability7.1 Highlibxml2SUSEThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...5.0 Mediumlibxml2SUSEThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...5.8 Mediumlibxml2SUSEThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...6.4 Mediumlibxml2SUSEThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...2.6 Lowlibxml2SUSEThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...6.8 Mediumlibxml2SUSEThe htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive...9.8 Criticallibxml2SUSElibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...4.3 Mediumlibxml2SUSENokogiri vulnerable to libxml XML Entity Expansion5.0 Mediumlibxml2SUSEThe xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web...4.3 Medium