Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-gkg9-tbm1-mqb4
SummaryMultiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
Aliases
0
alias CVE-2004-0989
Fixed_packages
0
url pkg:deb/debian/libxml2@2.6.11-5?distro=trixie
purl pkg:deb/debian/libxml2@2.6.11-5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.6.11-5%3Fdistro=trixie
1
url pkg:deb/debian/libxml2@2.6.16-7sarge1
purl pkg:deb/debian/libxml2@2.6.16-7sarge1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1esy-azbk-rkgn
1
vulnerability VCID-1f8c-m3q3-yyea
2
vulnerability VCID-1nax-e3jj-ryef
3
vulnerability VCID-1sh8-bsk3-auct
4
vulnerability VCID-1vsu-txd5-qbf3
5
vulnerability VCID-1zr7-kx71-tkcr
6
vulnerability VCID-2rbs-7dzf-wffv
7
vulnerability VCID-2wkc-xqzc-e3g2
8
vulnerability VCID-3ean-ys5t-bydz
9
vulnerability VCID-3s6k-9cgk-dfd6
10
vulnerability VCID-43m9-cg6h-nuet
11
vulnerability VCID-4sg9-pjmx-6kfy
12
vulnerability VCID-512y-x2fd-4uh5
13
vulnerability VCID-5dmr-9sh2-w3hk
14
vulnerability VCID-5er3-1kbw-33gt
15
vulnerability VCID-5g9a-2484-rucp
16
vulnerability VCID-5rs7-d9hu-rke7
17
vulnerability VCID-5z25-mem7-hfcx
18
vulnerability VCID-6bw6-4huq-dqex
19
vulnerability VCID-6hc4-jdej-gkcp
20
vulnerability VCID-6rnb-qe59-sbfy
21
vulnerability VCID-6t8y-27ba-cfa2
22
vulnerability VCID-7qqd-ze42-ayab
23
vulnerability VCID-7x6g-x68k-tuc4
24
vulnerability VCID-81dv-y5sg-9kgq
25
vulnerability VCID-81t2-tsq4-x7ce
26
vulnerability VCID-8719-hux3-fugq
27
vulnerability VCID-8ufh-w88r-kuc3
28
vulnerability VCID-9d2s-f8da-pkgg
29
vulnerability VCID-9m3t-anwb-4fbx
30
vulnerability VCID-9usm-m2ey-7qad
31
vulnerability VCID-a611-3sqz-bkac
32
vulnerability VCID-aj7d-6vcp-7yey
33
vulnerability VCID-akrb-6bu8-nqfq
34
vulnerability VCID-anzu-y37j-dbc2
35
vulnerability VCID-aqrr-3ej8-ukaa
36
vulnerability VCID-b2jx-djjd-rbdx
37
vulnerability VCID-b37v-a8em-gkfr
38
vulnerability VCID-bgcq-x9bd-83ap
39
vulnerability VCID-bksc-y3j7-ufek
40
vulnerability VCID-bm7f-1hbr-dyfx
41
vulnerability VCID-bqh3-eze3-3qbv
42
vulnerability VCID-brg4-2x5t-akac
43
vulnerability VCID-c16x-s3zb-bbef
44
vulnerability VCID-cgmw-k7dg-gbdw
45
vulnerability VCID-ct17-yjud-f3a1
46
vulnerability VCID-dmdw-gyj9-2ye5
47
vulnerability VCID-ds9f-6ppp-5fax
48
vulnerability VCID-e8w6-ax3x-wqan
49
vulnerability VCID-eb5v-9a7f-xyf2
50
vulnerability VCID-efx2-bpu9-z7a4
51
vulnerability VCID-egft-crba-6ubx
52
vulnerability VCID-eh92-k5tc-vyab
53
vulnerability VCID-ezzm-sgz4-xbaa
54
vulnerability VCID-f8jy-gtg6-x3f2
55
vulnerability VCID-f8q4-hk9r-6be4
56
vulnerability VCID-fda4-67cq-cqg4
57
vulnerability VCID-fn1n-adz5-5fcy
58
vulnerability VCID-frer-xevm-x7f7
59
vulnerability VCID-fynm-ftmy-47eg
60
vulnerability VCID-gfk4-86ze-3bdx
61
vulnerability VCID-j98t-paam-97ec
62
vulnerability VCID-jgtz-3gkg-dkbu
63
vulnerability VCID-jn88-q5mn-37gz
64
vulnerability VCID-jtkn-83hh-x3et
65
vulnerability VCID-jwft-4pxx-5ydg
66
vulnerability VCID-jxz3-ug52-cuhn
67
vulnerability VCID-kb3k-r616-6fht
68
vulnerability VCID-kg69-mhxs-tkcx
69
vulnerability VCID-kg71-czqe-v7g5
70
vulnerability VCID-kmvz-pynk-p7fn
71
vulnerability VCID-kvkp-bve3-bqh7
72
vulnerability VCID-m8d1-5qex-huf8
73
vulnerability VCID-m91c-mfu9-bbbh
74
vulnerability VCID-msku-25sz-rbeg
75
vulnerability VCID-ne9k-m48b-13cu
76
vulnerability VCID-p8us-th5q-yuey
77
vulnerability VCID-pdus-4wua-fucn
78
vulnerability VCID-pgfh-4snq-pbe6
79
vulnerability VCID-q1rm-fyhj-kbfu
80
vulnerability VCID-q736-5feg-q3h2
81
vulnerability VCID-qa31-1xtw-ybdg
82
vulnerability VCID-qv2p-47xc-eqc6
83
vulnerability VCID-r3xn-5u5y-hbdw
84
vulnerability VCID-rzc3-s4fv-7fhp
85
vulnerability VCID-tn6n-x8d3-jqd3
86
vulnerability VCID-tt91-8gv4-3qh9
87
vulnerability VCID-tvkx-4rem-wydk
88
vulnerability VCID-u795-5dzy-gkbs
89
vulnerability VCID-ueh5-fv4d-a7a8
90
vulnerability VCID-uehj-g87n-sfcf
91
vulnerability VCID-up1g-mjyj-pub4
92
vulnerability VCID-uqus-6prc-w7dh
93
vulnerability VCID-ur8u-6xpb-g3g3
94
vulnerability VCID-v22x-mq8p-8qc7
95
vulnerability VCID-vfxe-t79s-3qbb
96
vulnerability VCID-w156-x6fs-7baj
97
vulnerability VCID-wqc9-2nup-r7d5
98
vulnerability VCID-x53x-k5cn-4fhv
99
vulnerability VCID-xse1-pmep-nqdc
100
vulnerability VCID-xxpz-ak6z-5ufn
101
vulnerability VCID-y6ed-mwdn-8bcv
102
vulnerability VCID-y6zn-hwwh-23hp
103
vulnerability VCID-y76b-6hzr-uqgb
104
vulnerability VCID-y771-xrj9-6qca
105
vulnerability VCID-yjn6-17qx-9ubc
106
vulnerability VCID-zezc-xfmm-cqcg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.6.16-7sarge1
2
url pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?distro=trixie
purl pkg:deb/debian/libxml2@2.9.10%2Bdfsg-6.7%2Bdeb11u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d47v-hstc-wqc1
1
vulnerability VCID-k5ns-qsh8-9ufj
2
vulnerability VCID-kqv4-tkg9-6ugb
3
vulnerability VCID-p5kk-3yg6-yucb
4
vulnerability VCID-rymj-pnfv-3khf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.10%252Bdfsg-6.7%252Bdeb11u4%3Fdistro=trixie
3
url pkg:deb/debian/libxml2@2.9.14%2Bdfsg-1.3~deb12u5?distro=trixie
purl pkg:deb/debian/libxml2@2.9.14%2Bdfsg-1.3~deb12u5?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d47v-hstc-wqc1
1
vulnerability VCID-k5ns-qsh8-9ufj
2
vulnerability VCID-kqv4-tkg9-6ugb
3
vulnerability VCID-p4u9-3nqe-v3ab
4
vulnerability VCID-p5kk-3yg6-yucb
5
vulnerability VCID-rymj-pnfv-3khf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.9.14%252Bdfsg-1.3~deb12u5%3Fdistro=trixie
4
url pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d47v-hstc-wqc1
1
vulnerability VCID-k5ns-qsh8-9ufj
2
vulnerability VCID-kqv4-tkg9-6ugb
3
vulnerability VCID-p4u9-3nqe-v3ab
4
vulnerability VCID-p5kk-3yg6-yucb
5
vulnerability VCID-rymj-pnfv-3khf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.12.7%252Bdfsg%252Breally2.9.14-2.1%252Bdeb13u2%3Fdistro=trixie
5
url pkg:deb/debian/libxml2@2.15.2%2Bdfsg-0.1?distro=trixie
purl pkg:deb/debian/libxml2@2.15.2%2Bdfsg-0.1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-k5ns-qsh8-9ufj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.15.2%252Bdfsg-0.1%3Fdistro=trixie
6
url pkg:deb/debian/libxml2@2.15.3%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/libxml2@2.15.3%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.15.3%252Bdfsg-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/libxml2@2.4.19-4woody2
purl pkg:deb/debian/libxml2@2.4.19-4woody2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1esy-azbk-rkgn
1
vulnerability VCID-1f8c-m3q3-yyea
2
vulnerability VCID-1nax-e3jj-ryef
3
vulnerability VCID-1sh8-bsk3-auct
4
vulnerability VCID-1vsu-txd5-qbf3
5
vulnerability VCID-1zr7-kx71-tkcr
6
vulnerability VCID-2rbs-7dzf-wffv
7
vulnerability VCID-2wkc-xqzc-e3g2
8
vulnerability VCID-3ean-ys5t-bydz
9
vulnerability VCID-3s6k-9cgk-dfd6
10
vulnerability VCID-43m9-cg6h-nuet
11
vulnerability VCID-4sg9-pjmx-6kfy
12
vulnerability VCID-512y-x2fd-4uh5
13
vulnerability VCID-5dmr-9sh2-w3hk
14
vulnerability VCID-5er3-1kbw-33gt
15
vulnerability VCID-5g9a-2484-rucp
16
vulnerability VCID-5rs7-d9hu-rke7
17
vulnerability VCID-5z25-mem7-hfcx
18
vulnerability VCID-6bw6-4huq-dqex
19
vulnerability VCID-6hc4-jdej-gkcp
20
vulnerability VCID-6rnb-qe59-sbfy
21
vulnerability VCID-6t8y-27ba-cfa2
22
vulnerability VCID-7qqd-ze42-ayab
23
vulnerability VCID-7x6g-x68k-tuc4
24
vulnerability VCID-81dv-y5sg-9kgq
25
vulnerability VCID-81t2-tsq4-x7ce
26
vulnerability VCID-8719-hux3-fugq
27
vulnerability VCID-8ufh-w88r-kuc3
28
vulnerability VCID-9d2s-f8da-pkgg
29
vulnerability VCID-9m3t-anwb-4fbx
30
vulnerability VCID-9usm-m2ey-7qad
31
vulnerability VCID-a611-3sqz-bkac
32
vulnerability VCID-aj7d-6vcp-7yey
33
vulnerability VCID-akrb-6bu8-nqfq
34
vulnerability VCID-anzu-y37j-dbc2
35
vulnerability VCID-aqrr-3ej8-ukaa
36
vulnerability VCID-b2jx-djjd-rbdx
37
vulnerability VCID-b37v-a8em-gkfr
38
vulnerability VCID-bgcq-x9bd-83ap
39
vulnerability VCID-bksc-y3j7-ufek
40
vulnerability VCID-bm7f-1hbr-dyfx
41
vulnerability VCID-bqh3-eze3-3qbv
42
vulnerability VCID-brg4-2x5t-akac
43
vulnerability VCID-c16x-s3zb-bbef
44
vulnerability VCID-cgmw-k7dg-gbdw
45
vulnerability VCID-ct17-yjud-f3a1
46
vulnerability VCID-dmdw-gyj9-2ye5
47
vulnerability VCID-ds9f-6ppp-5fax
48
vulnerability VCID-e8w6-ax3x-wqan
49
vulnerability VCID-eb5v-9a7f-xyf2
50
vulnerability VCID-efx2-bpu9-z7a4
51
vulnerability VCID-egft-crba-6ubx
52
vulnerability VCID-eh92-k5tc-vyab
53
vulnerability VCID-ezzm-sgz4-xbaa
54
vulnerability VCID-f8jy-gtg6-x3f2
55
vulnerability VCID-f8q4-hk9r-6be4
56
vulnerability VCID-fda4-67cq-cqg4
57
vulnerability VCID-fn1n-adz5-5fcy
58
vulnerability VCID-frer-xevm-x7f7
59
vulnerability VCID-fynm-ftmy-47eg
60
vulnerability VCID-g4r1-u3v4-3bcr
61
vulnerability VCID-gfk4-86ze-3bdx
62
vulnerability VCID-gkg9-tbm1-mqb4
63
vulnerability VCID-j98t-paam-97ec
64
vulnerability VCID-jgtz-3gkg-dkbu
65
vulnerability VCID-jn88-q5mn-37gz
66
vulnerability VCID-jtkn-83hh-x3et
67
vulnerability VCID-jwft-4pxx-5ydg
68
vulnerability VCID-jxz3-ug52-cuhn
69
vulnerability VCID-kb3k-r616-6fht
70
vulnerability VCID-kg69-mhxs-tkcx
71
vulnerability VCID-kg71-czqe-v7g5
72
vulnerability VCID-kmvz-pynk-p7fn
73
vulnerability VCID-kvkp-bve3-bqh7
74
vulnerability VCID-m8d1-5qex-huf8
75
vulnerability VCID-m91c-mfu9-bbbh
76
vulnerability VCID-msku-25sz-rbeg
77
vulnerability VCID-ne9k-m48b-13cu
78
vulnerability VCID-p8us-th5q-yuey
79
vulnerability VCID-pdus-4wua-fucn
80
vulnerability VCID-pgfh-4snq-pbe6
81
vulnerability VCID-q1rm-fyhj-kbfu
82
vulnerability VCID-q736-5feg-q3h2
83
vulnerability VCID-qa31-1xtw-ybdg
84
vulnerability VCID-qv2p-47xc-eqc6
85
vulnerability VCID-r3xn-5u5y-hbdw
86
vulnerability VCID-rzc3-s4fv-7fhp
87
vulnerability VCID-tn6n-x8d3-jqd3
88
vulnerability VCID-tt91-8gv4-3qh9
89
vulnerability VCID-tvkx-4rem-wydk
90
vulnerability VCID-u795-5dzy-gkbs
91
vulnerability VCID-ueh5-fv4d-a7a8
92
vulnerability VCID-uehj-g87n-sfcf
93
vulnerability VCID-up1g-mjyj-pub4
94
vulnerability VCID-uqus-6prc-w7dh
95
vulnerability VCID-ur8u-6xpb-g3g3
96
vulnerability VCID-v22x-mq8p-8qc7
97
vulnerability VCID-vfxe-t79s-3qbb
98
vulnerability VCID-w156-x6fs-7baj
99
vulnerability VCID-wqc9-2nup-r7d5
100
vulnerability VCID-x53x-k5cn-4fhv
101
vulnerability VCID-xse1-pmep-nqdc
102
vulnerability VCID-xxpz-ak6z-5ufn
103
vulnerability VCID-y6ed-mwdn-8bcv
104
vulnerability VCID-y6zn-hwwh-23hp
105
vulnerability VCID-y76b-6hzr-uqgb
106
vulnerability VCID-y771-xrj9-6qca
107
vulnerability VCID-yjn6-17qx-9ubc
108
vulnerability VCID-zezc-xfmm-cqcg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libxml2@2.4.19-4woody2
1
url pkg:rpm/redhat/libxml@1:1.8.17-9?arch=2
purl pkg:rpm/redhat/libxml@1:1.8.17-9?arch=2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g4r1-u3v4-3bcr
1
vulnerability VCID-gkg9-tbm1-mqb4
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libxml@1:1.8.17-9%3Farch=2
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0989.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0989.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2004-0989
reference_id
reference_type
scores
0
value 0.24274
scoring_system epss
scoring_elements 0.96195
published_at 2026-06-04T12:55:00Z
1
value 0.24274
scoring_system epss
scoring_elements 0.962
published_at 2026-06-05T12:55:00Z
2
value 0.24274
scoring_system epss
scoring_elements 0.96202
published_at 2026-06-08T12:55:00Z
3
value 0.24274
scoring_system epss
scoring_elements 0.96203
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2004-0989
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0989
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0989
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=430645
reference_id 430645
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=430645
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/24704.c
reference_id CVE-2004-0989;OSVDB-11179
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/24704.c
5
reference_url https://www.securityfocus.com/bid/11526/info
reference_id CVE-2004-0989;OSVDB-11179
reference_type exploit
scores
url https://www.securityfocus.com/bid/11526/info
6
reference_url https://access.redhat.com/errata/RHSA-2004:615
reference_id RHSA-2004:615
reference_type
scores
url https://access.redhat.com/errata/RHSA-2004:615
7
reference_url https://access.redhat.com/errata/RHSA-2004:650
reference_id RHSA-2004:650
reference_type
scores
url https://access.redhat.com/errata/RHSA-2004:650
8
reference_url https://usn.ubuntu.com/89-1/
reference_id USN-89-1
reference_type
scores
url https://usn.ubuntu.com/89-1/
Weaknesses
Exploits
0
date_added 2004-10-26
description Libxml2 - Multiple Remote Stack Buffer Overflow Vulnerabilities
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2004-10-26
exploit_type remote
platform linux
source_date_updated 2013-03-10
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/11526/info
Severity_range_scorenull
Exploitability2.0
Weighted_severity0.2
Risk_score0.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-gkg9-tbm1-mqb4