Most recent entries from all

bdu:2020-04513

Withdrawn: BELL-CVE-2019-19956 — CVE-2019-19956 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2021-avi-255 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta…

certfr-2021-avi-255

cnvd-2020-03731

EUVD-2026-262445

fkie_cve-2019-19956

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

GHSA-5cvc-j2xm-h554

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

gsd-2019-19956

ICSA-21-103-08 — Siemens SINEMA Remote Connect Server

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

OESA-2022-1582 — libxml2 security update

Affected: openEuler:20.03-LTS-SP1: libxml2, openEuler:20.03-LTS-SP2: libxml2, openEuler:20.03-LTS-SP3: libxml2

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library. Security Fix(es): xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.(CVE-2019-19956) valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.(CVE-2022-23308)

openSUSE-SU-2020:0681-1 — Security update for libxml2

Security update for libxml2

RHSA-2020:2644 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update

expat: large number of colons in input makes parser consume high amount of resources, leading to DoS httpd: mod_http2: read-after-free on a string compare httpd: mod_http2: possible crash on late upgrade expat: heap-based buffer over-read via crafted XML input libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c httpd: mod_proxy_ftp use of uninitialized value libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations nghttp2: overly large SETTINGS frames can lead to DoS

SUSE-SU-2020:1299-1 — Security update for libxml2

Security update for libxml2

UBUNTU-CVE-2019-19956

Affected: Ubuntu:Pro:14.04:LTS: libxml2, Ubuntu:16.04:LTS: libxml2, Ubuntu:18.04:LTS: libxml2

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

WID-SEC-W-2023-1614 — Tenable Security Nessus Network Monitor: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.