Search for packages
| purl | pkg:nuget/libxml2@2.9.2 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1155-4sem-aaaq
Aliases: CVE-2015-7499 GHSA-jxjr-5h69-qw3w |
Moderate severity vulnerability that affects nokogiri | There are no reported fixed by versions. |
|
VCID-3xsz-q8j4-aaaj
Aliases: CVE-2015-5312 GHSA-xjqg-9jvg-fgx2 |
High severity vulnerability that affects nokogiri | There are no reported fixed by versions. |
|
VCID-6zrf-f1cm-aaah
Aliases: CVE-2015-8242 |
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data. | There are no reported fixed by versions. |
|
VCID-mjyh-qk4q-aaag
Aliases: CVE-2015-7942 |
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941. | There are no reported fixed by versions. |
|
VCID-n4gm-zpen-aaaa
Aliases: CVE-2015-7500 |
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlParseMisc function in parser.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags. | There are no reported fixed by versions. |
|
VCID-nmvj-q8r8-aaap
Aliases: CVE-2015-8317 |
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlParseXMLDecl function in parser.c in libxml2 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read. | There are no reported fixed by versions. |
|
VCID-sqpm-y8sb-aaac
Aliases: CVE-2015-8241 |
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlNextChar function in libxml2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data. | There are no reported fixed by versions. |
|
VCID-swer-ap9v-aaam
Aliases: CVE-2015-7497 |
Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 allows context-dependent attackers to cause a denial of service via unspecified vectors. | There are no reported fixed by versions. |
|
VCID-tkc2-74m9-aaaq
Aliases: CVE-2015-7941 |
Improper Restriction of Operations within the Bounds of a Memory Buffer libxml2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities. | There are no reported fixed by versions. |
|
VCID-uem6-z7mb-aaae
Aliases: CVE-2015-7498 |
Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||