Поиск уязвимостей
Количество 56
Количество 56
CVE-2023-29469
CVE-2023-29469
An issue was discovered in libxml2 before 2.10.4. When hashing empty d ...
GHSA-7jv7-hr35-fwjr
An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value).
BDU:2023-03302
Уязвимость функции xmlDictComputeFastKey (dict.c) библиотеки Libxml2, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2025-27113
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
CVE-2025-27113
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
CVE-2025-27113
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
CVE-2025-27113
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
CVE-2025-27113
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer der ...
CVE-2024-25062
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.
CVE-2024-25062
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.
CVE-2024-25062
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.
CVE-2024-25062
CVE-2024-25062
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.1 ...
GHSA-m9m6-wcr9-hh75
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
BDU:2025-03138
Уязвимость функции xmlPatMatch() в файле pattern.c библиотеки libxml2, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2024:0613-2
Security update for libxml2
SUSE-SU-2024:0556-1
Security update for libxml2
SUSE-SU-2024:0555-1
Security update for libxml2
SUSE-SU-2024:0461-2
Security update for libxml2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад | |
| CVE-2023-29469 An issue was discovered in libxml2 before 2.10.4. When hashing empty d ... | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
| GHSA-7jv7-hr35-fwjr An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value). | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
 | BDU:2023-03302 Уязвимость функции xmlDictComputeFastKey (dict.c) библиотеки Libxml2, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
 | CVE-2025-27113 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-27113 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. | CVSS3: 3.1 | 1% Низкий | больше 1 года назад |
 | CVE-2025-27113 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| CVE-2025-27113 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. | CVSS3: 2.9 | 1% Низкий | больше 1 года назад |
| CVE-2025-27113 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer der ... | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| CVE-2024-25062 An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| CVE-2024-25062 An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| CVE-2024-25062 An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free. | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| CVSS3: 7.5 | 1% Низкий | около 2 лет назад | |
| CVE-2024-25062 An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.1 ... | CVSS3: 7.5 | 1% Низкий | почти 3 года назад |
| GHSA-m9m6-wcr9-hh75 libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. | CVSS3: 2.9 | 1% Низкий | больше 1 года назад |
| BDU:2025-03138 Уязвимость функции xmlPatMatch() в файле pattern.c библиотеки libxml2, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | SUSE-SU-2024:0613-2 Security update for libxml2 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0556-1 Security update for libxml2 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0555-1 Security update for libxml2 | 1% Низкий | больше 2 лет назад | |
| SUSE-SU-2024:0461-2 Security update for libxml2 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу