Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xmlsoft libxml2 2.9.10 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-29469
An issue exists in libxml2 prior to 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an...
Xmlsoft Libxml2Debian Debian Linux 10.0
NA
CVE-2023-28484
In libxml2 prior to 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.
Xmlsoft Libxml2Debian Debian Linux 10.0
NA
CVE-2022-40304
An issue exists in libxml2 prior to 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
Xmlsoft Libxml2Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Clustered Data Ontap Antivirus Connector -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Snapmanager -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Apple MacosApple WatchosApple TvosApple IpadosApple Iphone Os
NA
CVE-2022-40303
An issue exists in libxml2 prior to 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation...
Xmlsoft Libxml2Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Active Iq Unified Manager -Netapp Snapmanager -Netapp Netapp Manageability Sdk -Apple MacosApple WatchosApple TvosApple IpadosApple Iphone OsNetapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -
4.3
CVSSv2
CVE-2022-29824
In libxml2 prior to 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other softwa...
Xmlsoft Libxml2Xmlsoft LibxsltFedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapdrive -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Manageability Software Development Kit -Netapp Active Iq Unified Manager -Netapp Snapmanager -Oracle Zfs Storage Appliance Kit 8.8Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -
6.4
CVSSv2
CVE-2020-24977
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Xmlsoft Libxml2 2.9.10Debian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Opensuse Leap 15.1Opensuse Leap 15.2Netapp Snapdrive -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Active Iq Unified ManagerNetapp Manageability Software Development Kit -Netapp Inventory Collect Tool -Netapp Hci H410c Firmware -Oracle Http Server 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Http Server 12.2.1.4.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql WorkbenchOracle Real User Experience Insight 13.4.1.0
5
CVSSv2
CVE-2019-20388
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
Xmlsoft Libxml2 2.9.10Debian Debian Linux 9.0Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Snapdrive -Netapp Plug-in For Symantec Netbackup -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Real User Experience Insight 13.3.1.0Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql Workbench
5
CVSSv2
CVE-2020-7595
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Xmlsoft Libxml2 2.9.10Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 12.04Debian Debian Linux 9.0Siemens Sinema Remote Connect ServerNetapp Steelstore Cloud Integrated Storage -Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Snapdrive -Netapp Symantec Netbackup -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -
5
CVSSv2
CVE-2019-19956
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 prior to 2.9.10 has a memory leak related to newDoc->oldNs.
Xmlsoft Libxml2Debian Debian Linux 8.0Debian Debian Linux 9.0Oracle Real User Experience Insight 13.3.1.0Fedoraproject Fedora 30Fedoraproject Fedora 32Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 12.04Netapp Steelstore Cloud Integrated Storage -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Siemens Sinema Remote Connect Server
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook