Most recent entries from all

bdu:2020-03623

Withdrawn: BELL-CVE-2020-7595 — CVE-2020-7595 does not affect BellSoft software

Withdrawn by the publisher.

BREW-mikutter-CVE-2020-7595 — libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation

Affected: Homebrew: mikutter

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. The Nokogiri RubyGem has patched its vendored copy of libxml2 in order to prevent this issue from affecting nokogiri.

certfr-2020-avi-257 — De multiples vulnérabilités ont été découvertes dans GitLab. Elles permettent à un attaquant de provoquer un déni de se…

certfr-2020-avi-257

cnvd-2020-04827

EUVD-2026-262413

fkie_cve-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

GHSA-7553-jr98-vx47 — libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation

Affected: RubyGems: nokogiri

gsd-2020-7595

ICSA-21-103-08 — Siemens SINEMA Remote Connect Server

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

msrc_CVE-2020-7595 — xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

msrc_CVE-2020-7595

openSUSE-SU-2020:0681-1 — Security update for libxml2

Security update for libxml2

RHSA-2020:2644 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update

expat: large number of colons in input makes parser consume high amount of resources, leading to DoS httpd: mod_http2: read-after-free on a string compare httpd: mod_http2: possible crash on late upgrade expat: heap-based buffer over-read via crafted XML input libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c httpd: mod_proxy_ftp use of uninitialized value libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations nghttp2: overly large SETTINGS frames can lead to DoS

SUSE-SU-2020:1299-1 — Security update for libxml2

Security update for libxml2

UBUNTU-CVE-2020-7595

Affected: Ubuntu:Pro:14.04:LTS: libxml2, Ubuntu:16.04:LTS: libxml2, Ubuntu:18.04:LTS: libxml2

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

WID-SEC-W-2023-1614 — Tenable Security Nessus Network Monitor: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.