opensuse/libxml2&distro=openSUSE Tumbleweed

Vulnerabilities (79)

• CVE-2015-7499Dec 15, 2015
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

• CVE-2015-7498Dec 15, 2015
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

• CVE-2015-7497Dec 15, 2015
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.

• CVE-2015-5312Dec 15, 2015
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.

• CVE-2015-8035Nov 18, 2015
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.

• CVE-2015-7942Nov 18, 2015
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different

• CVE-2015-7941Nov 18, 2015
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as

• CVE-2015-1819Aug 14, 2015
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

• CVE-2014-0191Jan 21, 2015
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitutio

• CVE-2014-3660Nov 4, 2014
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested enti

• CVE-2013-1969Apr 25, 2013
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecl_done functions, as d

• CVE-2013-0338Apr 25, 2013
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear compl

• CVE-2012-5134Nov 28, 2012
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entit

• CVE-2011-1944Sep 2, 2011
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer

• CVE-2010-4494Dec 7, 2010
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

• CVE-2008-4226Nov 25, 2008
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.

• CVE-2008-4225Nov 25, 2008
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.

• CVE-2008-4409Oct 3, 2008
  affected < 2.9.4-1.22fixed 2.9.4-1.22

  libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by use of xmllint on a certain XML document, a differe

• CVE-2007-6284Jan 12, 2008
  affected < 2.9.12-1.2fixed 2.9.12-1.2

  The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.