Описание
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libxml2 | fixed | 2.9.4+dfsg1-1 | package | |
| libxml2 | ignored | jessie | package | |
| libxml2 | no-dsa | wheezy | package |
Примечания
https://bugzilla.gnome.org/show_bug.cgi?id=761029
https://gitlab.gnome.org/GNOME/libxml2/-/commit/4472c3a5a5b516aaf59b89be602fbce52756c3e9 (v2.9.4)
https://gitlab.gnome.org/GNOME/libxml2/-/commit/502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b (v2.9.4)
EPSS
Связанные уязвимости
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
Уязвимость функции LIBXML_ATTR_FORMAT библиотеки libxml2, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
EPSS