Search for packages
| purl | pkg:nuget/libxml2@2.7.8 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-g1cw-j3hk-aaak
Aliases: CVE-2011-1944 |
Integer Overflow Integer overflow in xpath.c in libxml2, and libxml, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions. |
Affected by 49 other vulnerabilities. |
|
VCID-sena-v534-aaan
Aliases: CVE-2010-4494 |
Double Free Double free vulnerability in libxml2 and other versions, as used in Google Chrome and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling. |
Affected by 49 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:46:36.010790+00:00 | GitLab Importer | Affected by | VCID-g1cw-j3hk-aaak | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libxml2/CVE-2011-1944.yml | 34.0.1 |
| 2024-09-17T22:46:35.555879+00:00 | GitLab Importer | Affected by | VCID-sena-v534-aaan | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libxml2/CVE-2010-4494.yml | 34.0.1 |
| 2024-01-03T18:07:50.249677+00:00 | GitLab Importer | Affected by | VCID-g1cw-j3hk-aaak | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libxml2/CVE-2011-1944.yml | 34.0.0rc1 |
| 2024-01-03T18:07:49.855694+00:00 | GitLab Importer | Affected by | VCID-sena-v534-aaan | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libxml2/CVE-2010-4494.yml | 34.0.0rc1 |