PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para libxml2 en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 43
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.