libxml2 vulnerabilities (openSUSE)
85 vulnerabilities.
libxml2openSUSE** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a...4.7 Mediumlibxml2openSUSENokogiri does not forbid namespace nodes in XPointer ranges9.8 Criticallibxml2openSUSEHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...7.8 Highlibxml2openSUSEThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2openSUSEThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...5.5 Mediumlibxml2openSUSEMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...5.5 Mediumlibxml2openSUSEUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...5.5 Mediumlibxml2openSUSEUse-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used...8.8 Highlibxml2openSUSEHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...7.8 Highlibxml2openSUSEThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Mediumlibxml2openSUSEThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...7.5 Highlibxml2openSUSEThe xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent...7.5 Highlibxml2openSUSEThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...7.5 Highlibxml2openSUSEThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...8.1 Highlibxml2openSUSEThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...5.0 Mediumlibxml2openSUSEHeap-based buffer overflow in nokogiri5.0 Mediumlibxml2openSUSEHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...5.0 Mediumlibxml2openSUSEHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...5.0 Mediumlibxml2openSUSENokogiri subject to DoS via libxml2 vulnerability7.1 Highlibxml2openSUSEThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...5.8 Mediumlibxml2openSUSEThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...2.6 Lowlibxml2openSUSEThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...6.8 Mediumlibxml2openSUSElibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...4.3 Mediumlibxml2openSUSENokogiri vulnerable to libxml XML Entity Expansion5.0 Mediumlibxml2openSUSEparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...5.0 Mediumlibxml2openSUSEThe xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web...4.3 Mediumlibxml2openSUSEMultiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow...7.5 Highlibxml2openSUSElibxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU...4.3 Mediumlibxml2openSUSEHeap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0...6.8 Mediumlibxml2openSUSEInteger overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1...9.3 Highlibxml2openSUSEDouble free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8...7.5 Highlibxml2openSUSEInteger overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent...10.0 Highlibxml2openSUSEInteger overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent...7.8 Highlibxml2openSUSElibxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities,...5.0 Mediumlibxml2openSUSEThe xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause...5.0 Medium