Поиск уязвимостей
Количество 31
Количество 31
SUSE-SU-2026:3095-1
Security update for libxml2
RLSA-2026:61248
Moderate: libxml2 security update
RLSA-2026:60394
Moderate: libxml2 security update
GHSA-h67q-h62w-5mjr
libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell() function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long input line, an attacker can overflow internal buffers (command, arg, and argv) during input parsing. This results in memory corruption within the stack frame. Successful exploitation may cause a crash or potentially allow arbitrary code execution in the context of the xmlcatalog process. This issue has been fixed in the commit c2e233fc. NOTE: The maintainers of this project did not agree that this issue is a vulnerability and considered it a bug.
ELSA-2026-61248-0
ELSA-2026-61248-0: libxml2 security update (MODERATE)
ELSA-2026-60394-0
ELSA-2026-60394-0: libxml2 security update (MODERATE)
openSUSE-SU-2026:21317-1
Security update for libxml2
ALT-PU-2023-8083
ALT-PU-2023-8083: package `libxml2` update to version 2.12.3-alt1
ALT-PU-2026-20587
ALT-PU-2026-20587: package `libxml2` update to version 2.9.14-alt1.p10.1
ALT-PU-2026-15354
ALT-PU-2026-15354: package `libxml2` update to version 2.9.12-alt1.p10.10
ALT-PU-2026-19670
ALT-PU-2026-19670: package `libxml2` update to version 2.12.10-alt3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2026:3095-1 Security update for libxml2 | 0% Низкий | 4 месяца назад | |
 | RLSA-2026:61248 Moderate: libxml2 security update | 0% Низкий | 2 месяца назад | |
| RLSA-2026:60394 Moderate: libxml2 security update | 0% Низкий | 2 месяца назад | |
| GHSA-h67q-h62w-5mjr libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell() function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long input line, an attacker can overflow internal buffers (command, arg, and argv) during input parsing. This results in memory corruption within the stack frame. Successful exploitation may cause a crash or potentially allow arbitrary code execution in the context of the xmlcatalog process. This issue has been fixed in the commit c2e233fc. NOTE: The maintainers of this project did not agree that this issue is a vulnerability and considered it a bug. | CVSS3: 7.8 | 0% Низкий | 4 месяца назад |
| ELSA-2026-61248-0 ELSA-2026-61248-0: libxml2 security update (MODERATE) | 0% Низкий | 2 месяца назад | |
| ELSA-2026-60394-0 ELSA-2026-60394-0: libxml2 security update (MODERATE) | 0% Низкий | 3 месяца назад | |
| openSUSE-SU-2026:21317-1 Security update for libxml2 | 4 месяца назад | ||
| ALT-PU-2023-8083 ALT-PU-2023-8083: package `libxml2` update to version 2.12.3-alt1 | CVSS3: 9.8 | почти 3 года назад | |
| ALT-PU-2026-20587 ALT-PU-2026-20587: package `libxml2` update to version 2.9.14-alt1.p10.1 | CVSS3: 8.5 | 6 дней назад | |
| ALT-PU-2026-15354 ALT-PU-2026-15354: package `libxml2` update to version 2.9.12-alt1.p10.10 | CVSS3: 9.8 | около 2 месяцев назад | |
| ALT-PU-2026-19670 ALT-PU-2026-19670: package `libxml2` update to version 2.12.10-alt3 | CVSS3: 9.1 | 12 дней назад |
Уязвимостей на страницу