Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/mxml@2.10-1
purl pkg:deb/debian/mxml@2.10-1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-bt3w-yzkc-akfa
Aliases:
CVE-2018-20593
multiple issues
3.2-1
Affected by 1 other vulnerability.
VCID-h5v5-972j-7bd6
Aliases:
CVE-2018-20592
multiple issues
3.2-1
Affected by 1 other vulnerability.
VCID-s796-thrw-p3cf
Aliases:
CVE-2018-20004
multiple issues
2.12-2
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-4gfb-j82s-3qhm The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file. CVE-2016-4571
VCID-qzkk-vpd1-r3hv The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file. CVE-2016-4570

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T03:11:47.900379+00:00 Debian Oval Importer Fixing VCID-qzkk-vpd1-r3hv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T01:27:19.455468+00:00 Debian Oval Importer Fixing VCID-4gfb-j82s-3qhm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-02T02:22:31.163272+00:00 Debian Oval Importer Affected by VCID-h5v5-972j-7bd6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-02T02:21:13.544215+00:00 Debian Oval Importer Affected by VCID-bt3w-yzkc-akfa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-01T23:20:58.944646+00:00 Debian Oval Importer Affected by VCID-s796-thrw-p3cf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0