Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vqpg-m25j-7558

Опубликовано: 07 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."

** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."

EPSS

Процентиль: 24%
0.00076
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 1 года назад

** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."

CVSS3: 5.9
redhat
почти 2 года назад

libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."

CVSS3: 6.5
nvd
больше 1 года назад

libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."

CVSS3: 6.5
msrc
5 месяцев назад

Описание отсутствует

CVSS3: 6.5
debian
больше 1 года назад

libxml2 through 2.11.5 has a use-after-free that can only occur after ...

EPSS

Процентиль: 24%
0.00076
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416