Количество 24
Количество 24
RLSA-2025:2686
Important: libxml2 security update
ELSA-2025-2686
ELSA-2025-2686: libxml2 security update (IMPORTANT)
ELSA-2025-2679
ELSA-2025-2679: libxml2 security update (IMPORTANT)
ELSA-2025-2673
ELSA-2025-2673: libxml2 security update (IMPORTANT)
SUSE-SU-2025:0976-1
Security update for libxml2
SUSE-SU-2025:0748-1
Security update for libxml2
SUSE-SU-2025:0747-1
Security update for libxml2
SUSE-SU-2025:0746-1
Security update for libxml2
CVE-2025-24928
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.
CVE-2025-24928
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.
CVE-2025-24928
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.
CVE-2025-24928
CVE-2025-24928
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buff ...
CVE-2024-56171
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
CVE-2024-56171
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
CVE-2024-56171
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
CVE-2024-56171
CVE-2024-56171
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free i ...
GHSA-m366-8h8r-6fqr
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
GHSA-fgfv-9xqc-v794
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2025:2686 Important: libxml2 security update | около 1 месяца назад | ||
| ELSA-2025-2686 ELSA-2025-2686: libxml2 security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2025-2679 ELSA-2025-2679: libxml2 security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2025-2673 ELSA-2025-2673: libxml2 security update (IMPORTANT) | 3 месяца назад | ||
 | SUSE-SU-2025:0976-1 Security update for libxml2 | 3 месяца назад | ||
| SUSE-SU-2025:0748-1 Security update for libxml2 | 4 месяца назад | ||
| SUSE-SU-2025:0747-1 Security update for libxml2 | 4 месяца назад | ||
| SUSE-SU-2025:0746-1 Security update for libxml2 | 4 месяца назад | ||
 | CVE-2025-24928 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
 | CVE-2025-24928 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
 | CVE-2025-24928 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
 | CVSS3: 7.8 | 0% Низкий | 4 месяца назад | |
| CVE-2025-24928 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buff ... | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
| CVE-2024-56171 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
| CVE-2024-56171 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used. | CVSS3: 8.1 | 0% Низкий | 4 месяца назад |
| CVE-2024-56171 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
| CVSS3: 7.8 | 0% Низкий | 3 месяца назад | |
| CVE-2024-56171 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free i ... | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
| GHSA-m366-8h8r-6fqr libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
| GHSA-fgfv-9xqc-v794 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу