LI
Product
libxml2
115
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 44Medium 29Low 5
Watch
Add libxml2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-0339 | – | Jan 21 | libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function,… Affected: through 2.9.1; 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; +34 more |
| CVE-2013-2877 | – | Jul 10 | parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a… Affected: through 2.9.0; 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; +34 more |
| CVE-2013-1969 | – | Apr 25 | Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly… Affected: 2.9.0 |
| CVE-2013-0338 | – | Apr 25 | libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long… Affected: through 2.9.0; 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; +34 more |
| CVE-2012-0841 | – | Dec 21 | libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of… Affected: through 2.7.8; 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; +34 more |
| CVE-2012-5134 | – | Nov 28 | Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products,… Affected: through 2.9.0; 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; +34 more |
| CVE-2012-2871 | – | Aug 31 | libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which… Affected: through 2.9.0 |
| CVE-2011-1944 | – | Sep 2 | Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service… Affected: 2.6.0; 2.6.1; 2.6.2; 2.6.3; 2.6.4; 2.6.5; +26 more |
| CVE-2010-4494 | – | Dec 7 | Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service… Affected: through 2.7.8 |
| CVE-2010-4008 | – | Nov 16 | libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of… Affected: before 2.7.8 |
| CVE-2009-2414 | – | Aug 11 | Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service… Affected: 2.5.10; 2.6.16; 2.6.26; 2.6.27; 2.6.32 |
| CVE-2008-4409 | – | Oct 3 | libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service (memory… Affected: 2.7.0; 2.7.1 |
| CVE-2008-3529 | – | Sep 12 | Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or… Affected: before 2.7.0 |
| CVE-2004-0989 | – | Mar 1 | Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is… Affected: 2.5.11; 2.6.6; 2.6.7; 2.6.8; 2.6.9; 2.6.11; +3 more |
| CVE-2004-0110 | – | Mar 15 | Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL Affected: 2.4.19; 2.4.23; 2.5.4; 2.5.10; 2.5.11; 2.6.0; +5 more |