CVE-2017-5130
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
Published Updated
PatchFirst · Latest vulnerabilities
libxml2 vulnerabilities · Page 3
Vulnerabilities published for libxml2 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 43
CVE-2017-8872
The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
- Update to 2.9.1+dfsg1-3ubuntu4.13+esm2
Published UpdatedCVE-2017-5969
libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.