Most recent entries from all

bdu:2016-01644

BREW-mikutter-CVE-2015-7499 — Heap-based buffer overflow in nokogiri

Affected: Homebrew: mikutter

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or crash the application.

certfr-2016-avi-106 — De multiples vulnérabilités ont été corrigées dans les produits Apple. Certaines d'entre el…

certfr-2016-avi-106

cnvd-2015-08399

EUVD-2026-95010

fkie_cve-2015-7499

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

GHSA-jxjr-5h69-qw3w — Heap-based buffer overflow in nokogiri

Affected: RubyGems: nokogiri

gsd-2015-7499

openSUSE-SU-2024:10192-1 — libxml2-2-2.9.4-1.22 on GA media

libxml2-2-2.9.4-1.22 on GA media

RHSA-2015:2549 — Red Hat Security Advisory: libxml2 security update

libxml2: CPU exhaustion when processing specially crafted XML input libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey libxml2: Heap-based buffer overflow in xmlParseXmlDecl libxml2: Heap-based buffer overflow in xmlGROW libxml2: Heap buffer overflow in xmlParseMisc libxml2: Out-of-bounds memory access libxml2: heap-based buffer overflow in xmlParseConditionalSections() libxml2: Buffer overread with XML parser in xmlNextChar libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

SUSE-SU-2016:0030-1 — Security update for libxml2

Security update for libxml2

UBUNTU-CVE-2015-7499

Affected: Ubuntu:14.04:LTS: libxml2

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

WID-SEC-W-2023-1614 — Tenable Security Nessus Network Monitor: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.