Search for packages
Package details: pkg:conan/libxml2@2.11.5
purl pkg:conan/libxml2@2.11.5
Tags Ghost
Next non-vulnerable version 2.11.9
Latest non-vulnerable version 2.12.9
Risk 3.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-2fyr-85vm-aaak
Aliases:
CVE-2023-45322
** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."
2.11.6
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version