Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (9)
| Vulnerability |
Summary |
Aliases |
|
VCID-4gyr-nwyy-qfeq
|
Improper Restriction of Operations within the Bounds of a Memory Buffer
It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.
|
CVE-2016-9597
|
|
VCID-8pzj-mq5r-rqcq
|
Loop with Unreachable Exit Condition ('Infinite Loop')
The xz_decomp function in xzlib.c in libxml2, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.
|
CVE-2018-9251
|
|
VCID-a28u-yu15-3qa6
|
Use After Free
Multiple use-after-free vulnerabilities in libxml2 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecl_done functions, as demonstrated by a buffer overflow in the xmlBufGetInputBase function.
|
CVE-2013-1969
|
|
VCID-b828-btkm-tufv
|
Uncontrolled Resource Consumption
libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.
|
CVE-2016-9596
|
|
VCID-bmv8-f7rb-43dc
|
libxml2: XXE vulnerability
|
CVE-2024-40896
|
|
VCID-drf1-ktzv-a3dk
|
libxml2: Libxml2 out of bounds read
|
CVE-2025-26434
|
|
VCID-eqva-5dwq-d7cw
|
libxml: Null pointer dereference leads to Denial of service (DoS)
|
CVE-2025-49795
|
|
VCID-gc1r-nauj-1fge
|
Out-of-bounds Read
libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document. NOTE: this vulnerability exists because of a missing fix for CVE-2016-4483.
|
CVE-2016-9598
|
|
VCID-rbdy-dm61-jkdw
|
Multiple vulnerabilities in libxml2 might lead to execution of arbitrary
code or Denial of Service.
|
CVE-2008-4409
|