Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fgfv-9xqc-v794

Опубликовано: 19 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

EPSS

Процентиль: 0%
0.00007
Низкий

7.8 High

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 7.8
ubuntu
4 месяца назад

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

CVSS3: 7.8
redhat
4 месяца назад

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

CVSS3: 7.8
nvd
4 месяца назад

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

CVSS3: 7.8
msrc
4 месяца назад

Описание отсутствует

CVSS3: 7.8
debian
4 месяца назад

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buff ...

EPSS

Процентиль: 0%
0.00007
Низкий

7.8 High

CVSS3

Дефекты

CWE-121