Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 90

Export CSV
CVE-2012-2871

libxslt: Heap-buffer overflow caused by bad cast in XSL transforms

libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed
Vendors
Apple Google Redhat and 1 more
Products
Iphone Os Chrome Enterprise Linux and 1 more
CVE-2012-5134

libxml2: Heap-buffer-underflow in xmlParseAttValueComplex

Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed
Vendors
Apple Google Redhat and 1 more
Products
Iphone Os Chrome Enterprise Linux and 1 more
CVE-2013-0338

libxml2: CPU consumption DoS when performing string substitutions during entities expansion

libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed
Vendors
Canonical Opensuse Redhat and 1 more
Products
Ubuntu Linux Opensuse Enterprise Linux and 1 more
CVE-2010-4008

libxml2: Crash (stack frame overflow or NULL pointer dereference) by traversal of XPath axis

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Apache Apple Canonical and 6 more
Products
Openoffice Iphone Os Itunes and 13 more
CVE-2013-2877

libxml2: Out-of-bounds read via a document that ends abruptly

parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.

CVSS 2.0 · 5.0 Medium EPSS 5.0% KEV · Not listed
Vendors
Google Redhat Xmlsoft
Products
Chrome Enterprise Linux Libxml2
CVE-2018-9251

libxml2: infinite loop in xz_decomp function in xzlib.c

The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.

CVSS 3.0 · 5.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Debian Redhat Xmlsoft
Products
Debian Linux Enterprise Linux Libxml2
CVE-2017-15412

libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Debian Google Redhat and 1 more
Products
Debian Linux Chrome Ansible Tower and 7 more
CVE-2016-9598

libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS)

libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document. NOTE: this vulnerability exists because of a missing fix for CVE-2016-4483.

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat Xmlsoft
Products
Jboss Core Services Libxml2
CVE-2016-9597

libxml2: stack overflow before detecting invalid XML file (unfixed CVE-2016-3705 in JBCS)

It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Canonical Debian Hp and 3 more
Products
Ubuntu Linux Debian Linux Icewall Federation Agent and 4 more
CVE-2016-9596

libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)

libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Redhat Xmlsoft
Products
Jboss Core Services Libxml2