Поиск уязвимостей
Количество 41
Количество 41
CVE-2026-6653
Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 ...
CVE-2023-45322
libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."
CVE-2023-45322
libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."
CVE-2023-45322
libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."
CVE-2023-45322
libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."
CVE-2023-45322
libxml2 through 2.11.5 has a use-after-free that can only occur after ...
SUSE-SU-2023:4537-1
Security update for libxml2
SUSE-SU-2023:4505-1
Security update for libxml2
SUSE-SU-2023:4504-1
Security update for libxml2
SUSE-SU-2023:4464-1
Security update for libxml2
ROS-20260921-80-0188
Уязвимость libxml2
ROS-20260921-73-0137
Уязвимость libxml2
ROS-20231013-03
Уязвимость libxml2
RLSA-2026:69655
Moderate: libxml2 security, bug fix, and enhancement update
GHSA-vqpg-m25j-7558
** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."
GHSA-v4qw-p44r-qhfg
Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.
ELSA-2026-69655
ELSA-2026-69655: libxml2 security, bug fix, and enhancement update (MODERATE)
BDU:2026-17856
Уязвимость функции xmlParseInternalSubset() библиотеки Libxml2, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2023-06827
Уязвимость функции xmlUnlinkNode (tree.c) библиотеки libxml2, позволяющая нарушителю вызвать отказ в обслуживании
RLSA-2026:61247
Moderate: libxml2 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2026-6653 Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 ... | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2023-45322 libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail." | CVSS3: 6.5 | 1% Низкий | около 3 лет назад |
 | CVE-2023-45322 libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail." | CVSS3: 5.9 | 1% Низкий | около 3 лет назад |
 | CVE-2023-45322 libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail." | CVSS3: 6.5 | 1% Низкий | около 3 лет назад |
 | CVE-2023-45322 libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail." | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
| CVE-2023-45322 libxml2 through 2.11.5 has a use-after-free that can only occur after ... | CVSS3: 6.5 | 1% Низкий | около 3 лет назад |
 | SUSE-SU-2023:4537-1 Security update for libxml2 | 1% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4505-1 Security update for libxml2 | 1% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4504-1 Security update for libxml2 | 1% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4464-1 Security update for libxml2 | 1% Низкий | почти 3 года назад | |
 | ROS-20260921-80-0188 Уязвимость libxml2 | CVSS3: 7 | 0% Низкий | около 2 месяцев назад |
| ROS-20260921-73-0137 Уязвимость libxml2 | CVSS3: 7 | 0% Низкий | около 2 месяцев назад |
| ROS-20231013-03 Уязвимость libxml2 | CVSS3: 6.5 | 1% Низкий | около 3 лет назад |
 | RLSA-2026:69655 Moderate: libxml2 security, bug fix, and enhancement update | 0% Низкий | около 2 месяцев назад | |
| GHSA-vqpg-m25j-7558 ** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail." | CVSS3: 6.5 | 1% Низкий | около 3 лет назад |
| GHSA-v4qw-p44r-qhfg Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling. | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
| ELSA-2026-69655 ELSA-2026-69655: libxml2 security, bug fix, and enhancement update (MODERATE) | 0% Низкий | около 2 месяцев назад | |
 | BDU:2026-17856 Уязвимость функции xmlParseInternalSubset() библиотеки Libxml2, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 9.8 | 0% Низкий | 9 месяцев назад |
| BDU:2023-06827 Уязвимость функции xmlUnlinkNode (tree.c) библиотеки libxml2, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 1% Низкий | около 3 лет назад |
| RLSA-2026:61247 Moderate: libxml2 security update | 2 месяца назад |
Уязвимостей на страницу