libxml2 vulnerabilities (Ubuntu)
101 vulnerabilities.
libxml2UbuntuNokogiri NULL Pointer Dereference7.5 Highlibxml2UbuntuUncontrolled resource consumption in nokogiri6.5 Mediumlibxml2UbuntuNokogiri gem, via libxml, is affected by DoS vulnerabilities8.8 Highlibxml2UbuntuAn integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62...8.8 Highlibxml2UbuntuNokogiri gem, via libxml, is affected by DoS vulnerabilities7.5 Highlibxml2UbuntuBuffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an...9.8 Criticallibxml2UbuntuA flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the...9.8 Criticallibxml2UbuntuA remote code execution vulnerability in libxml2 could enable an attacker using a specially...7.8 Highlibxml2UbuntuOut-of-bounds read in nokogiri7.5 Highlibxml2Ubuntulibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the...7.5 Highlibxml2Ubuntulibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function...7.5 Highlibxml2UbuntuA buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function...7.5 Highlibxml2UbuntuThe htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a...9.1 Criticallibxml2Ubuntu** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a...4.7 Mediumlibxml2UbuntuCVE-2016-9318 does not affect BellSoft software5.5 Mediumlibxml2UbuntuNokogiri does not forbid namespace nodes in XPointer ranges9.8 Criticallibxml2UbuntuUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...8.8 Highlibxml2UbuntuFormat string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact...9.8 Criticallibxml2UbuntuXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...7.1 Highlibxml2UbuntuThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...7.5 Highlibxml2UbuntuHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...7.8 Highlibxml2UbuntuThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2UbuntuThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...5.5 Mediumlibxml2UbuntuMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...5.5 Mediumlibxml2UbuntuUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...5.5 Mediumlibxml2UbuntuUse-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used...8.8 Highlibxml2UbuntuHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...7.8 Highlibxml2UbuntuThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2UbuntuThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...7.5 Highlibxml2UbuntuThe xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent...7.5 Highlibxml2UbuntuThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...7.5 Highlibxml2UbuntuDenial of service or RCE from libxml2 and libxslt7.5 Highlibxml2UbuntuThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...8.1 Highlibxml2UbuntuThe htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial...6.5 Mediumlibxml2UbuntuThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...5.0 Mediumlibxml2UbuntuHeap-based buffer overflow in nokogiri5.0 Mediumlibxml2UbuntuHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...5.0 Mediumlibxml2UbuntuHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...5.0 Mediumlibxml2UbuntuNokogiri subject to DoS via libxml2 vulnerability7.1 Highlibxml2UbuntuThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...5.0 Mediumlibxml2UbuntuThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...5.8 Mediumlibxml2UbuntuThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...6.4 Mediumlibxml2UbuntuThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...2.6 Lowlibxml2UbuntuThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...6.8 Mediumlibxml2UbuntuThe htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive...9.8 Criticallibxml2Ubuntulibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...4.3 Mediumlibxml2UbuntuNokogiri vulnerable to libxml XML Entity Expansion5.0 Mediumlibxml2Ubuntuparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...5.0 Mediumlibxml2Ubuntulibxml2 regressionNo scorelibxml2Ubuntulibxml2 regressionNo score- Show moreLoading…