Поиск уязвимостей
Количество 20
Количество 20
CVE-2022-29824
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
CVE-2022-29824
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
CVE-2022-29824
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
CVE-2022-29824
In libxml2 before 2.9.14 several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted multi-gigabyte XML file. Other software using libxml2's buffer functions for example libxslt through 1.1.35 is affected as well.
CVE-2022-29824
In libxml2 before 2.9.14, several buffer handling functions in buf.c ( ...
RLSA-2022:5317
Moderate: libxml2 security update
RLSA-2022:5250
Moderate: libxml2 security update
GHSA-3rrw-pv9w-qgch
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
ELSA-2022-5317
ELSA-2022-5317: libxml2 security update (MODERATE)
ELSA-2022-5250
ELSA-2022-5250: libxml2 security update (MODERATE)
BDU:2022-03033
Уязвимость компонентов buf.c и tree.c библиотеки libxml2, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
SUSE-SU-2022:2552-1
Security update for libxml2
SUSE-SU-2022:1833-1
Security update for libxml2
SUSE-SU-2022:1750-1
Security update for libxml2
ROS-20220516-08
Уязвимость libxml2
ALT-PU-2022-2687
ALT-PU-2022-2687: package `libxslt` update to version 1.1.37-alt1
SUSE-SU-2023:2048-1
Security update for libxml2
ALT-PU-2024-15136
ALT-PU-2024-15136: package `libxslt` update to version 1.1.37-alt1
ALT-PU-2022-1807
ALT-PU-2022-1807: package `libxml2` update to version 2.9.14-alt1
ALT-PU-2023-1172
ALT-PU-2023-1172: package `libxml2` update to version 2.9.12-alt1.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-29824 In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well. | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
 | CVE-2022-29824 In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well. | CVSS3: 7.4 | 4% Низкий | больше 4 лет назад |
 | CVE-2022-29824 In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well. | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
 | CVE-2022-29824 In libxml2 before 2.9.14 several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted multi-gigabyte XML file. Other software using libxml2's buffer functions for example libxslt through 1.1.35 is affected as well. | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
| CVE-2022-29824 In libxml2 before 2.9.14, several buffer handling functions in buf.c ( ... | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
 | RLSA-2022:5317 Moderate: libxml2 security update | 4% Низкий | больше 4 лет назад | |
| RLSA-2022:5250 Moderate: libxml2 security update | 4% Низкий | больше 4 лет назад | |
| GHSA-3rrw-pv9w-qgch In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well. | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
| ELSA-2022-5317 ELSA-2022-5317: libxml2 security update (MODERATE) | 4% Низкий | больше 4 лет назад | |
| ELSA-2022-5250 ELSA-2022-5250: libxml2 security update (MODERATE) | 4% Низкий | больше 4 лет назад | |
 | BDU:2022-03033 Уязвимость компонентов buf.c и tree.c библиотеки libxml2, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код | CVSS3: 6.5 | 4% Низкий | больше 4 лет назад |
 | SUSE-SU-2022:2552-1 Security update for libxml2 | больше 4 лет назад | ||
| SUSE-SU-2022:1833-1 Security update for libxml2 | больше 4 лет назад | ||
| SUSE-SU-2022:1750-1 Security update for libxml2 | больше 4 лет назад | ||
 | ROS-20220516-08 Уязвимость libxml2 | 4% Низкий | больше 4 лет назад | |
| ALT-PU-2022-2687 ALT-PU-2022-2687: package `libxslt` update to version 1.1.37-alt1 | CVSS3: 6.5 | 4% Низкий | около 4 лет назад |
| SUSE-SU-2023:2048-1 Security update for libxml2 | больше 3 лет назад | ||
| ALT-PU-2024-15136 ALT-PU-2024-15136: package `libxslt` update to version 1.1.37-alt1 | CVSS3: 8.8 | почти 2 года назад | |
| ALT-PU-2022-1807 ALT-PU-2022-1807: package `libxml2` update to version 2.9.14-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
| ALT-PU-2023-1172 ALT-PU-2023-1172: package `libxml2` update to version 2.9.12-alt1.p10.1 | CVSS3: 9.8 | почти 4 года назад |
Уязвимостей на страницу