Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v4qw-p44r-qhfg

Опубликовано: 22 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7
CVSS3: 9.8

Описание

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

EPSS

Процентиль: 28%
0.00355
Низкий

7 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 1 месяца назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

CVSS3: 5.9
redhat
около 1 месяца назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

CVSS3: 9.8
nvd
около 1 месяца назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

CVSS3: 9.8
debian
около 1 месяца назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 ...

EPSS

Процентиль: 28%
0.00355
Низкий

7 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-416