Search for packages
| purl | pkg:nuget/libxml2@2.7.8.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2016-5131
|
Use After Free Use-after-free vulnerability in libxml2, as used in Google Chrome, allows remote attackers to cause a denial of … | There are no reported fixed by versions. |
|
CVE-2016-1839
|
Out-of-bounds Read The xmlDictAddString function in libxml2, as used in Apple iOS, OS X, tvOS, and watchOS, allows remote attackers … | There are no reported fixed by versions. |
|
CVE-2016-9318
|
Improper Restriction of XML External Entity Reference libxml2, as used in XMLSec and other products, does not offer a flag … | There are no reported fixed by versions. |
|
CVE-2016-3627
|
Improper Input Validation The xmlStringGetNodeList function in tree.c in libxml2, when used in recovery mode, allows context-dependent attackers to cause … | There are no reported fixed by versions. |
|
CVE-2017-5130
|
Out-of-bounds Write An integer overflow in xmlmemory.c in libxml2, as used in Google Chrome and other products, allowed a remote … | There are no reported fixed by versions. |
|
CVE-2016-9596
|
Uncontrolled Resource Consumption libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers … | There are no reported fixed by versions. |
|
CVE-2015-7500
|
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlParseMisc function in parser.c in libxml2 allows context-dependent … | There are no reported fixed by versions. |
|
CVE-2021-3518
|
Use After Free There's a flaw in libxml2 An attacker who is able to submit a crafted file to be … | There are no reported fixed by versions. |
|
CVE-2016-4483
|
Deserialization of Untrusted Data The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service … | There are no reported fixed by versions. |
|
CVE-2021-3517
|
Out-of-bounds Write There is a flaw in the xml entity encoding functionality of libxml2 The most likely impact of this … | There are no reported fixed by versions. |
|
CVE-2016-4658
|
Improper Restriction of Operations within the Bounds of a Memory Buffer xpointer.c in libxml2 (as used in Apple iOS, OS … | There are no reported fixed by versions. |
|
CVE-2022-40304
|
Improper Restriction of XML External Entity Reference An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions … | There are no reported fixed by versions. |
|
CVE-2015-8710
|
Improper Restriction of Operations within the Bounds of a Memory Buffer The htmlParseComment function in HTMLparser.c in libxml2 allows attackers … | There are no reported fixed by versions. |
|
CVE-2017-7375
|
Improper Restriction of XML External Entity Reference A flaw in libxml2 allows remote XML entity inclusion with default parser flags … | There are no reported fixed by versions. |
|
CVE-2021-3537
|
NULL Pointer Dereference A vulnerability found in libxml2 shows that it does not propagate errors while parsing XML mixed content, … | There are no reported fixed by versions. |
|
CVE-2015-8241
|
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlNextChar function in libxml2 does not properly check … | There are no reported fixed by versions. |
|
CVE-2016-4448
|
Use of Externally-Controlled Format String Format string vulnerability in libxml2 allows attackers to have unspecified impact via format string specifiers … | There are no reported fixed by versions. |
|
CVE-2022-40303
|
Integer Overflow or Wraparound An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the … | There are no reported fixed by versions. |
|
CVE-2017-7376
|
Improper Restriction of Operations within the Bounds of a Memory Buffer Buffer overflow in libxml2 allows remote attackers to execute … | There are no reported fixed by versions. |
|
CVE-2016-1834
|
Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlStrncat function in libxml2, … | There are no reported fixed by versions. |
|
CVE-2017-15412
|
Use After Free Use after free in libxml2, as used in Google Chrome and other products, allowed a remote attacker … | There are no reported fixed by versions. |
|
CVE-2018-14404
|
NULL Pointer Dereference A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 when parsing an invalid XPath … | There are no reported fixed by versions. |
|
CVE-2016-1836
|
Use After Free Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2, as used in Apple iOS, OS X, tvOS, and … | There are no reported fixed by versions. |
|
CVE-2016-1762
|
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlNextChar function in libxml2 allows remote attackers to … | There are no reported fixed by versions. |
|
CVE-2016-2073
|
Improper Restriction of Operations within the Bounds of a Memory Buffer The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers … | There are no reported fixed by versions. |
|
CVE-2017-16931
|
Improper Restriction of Operations within the Bounds of a Memory Buffer parser.c in libxml2 mishandles parameter-entity references because the NEXTL … | There are no reported fixed by versions. |
|
CVE-2022-29824
|
Integer Overflow or Wraparound In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check … | There are no reported fixed by versions. |
|
CVE-2023-39615
|
Improper Restriction of Operations within the Bounds of a Memory Buffer Xmlsoft Libxml2 v2.11.0 was discovered to contain a global … | There are no reported fixed by versions. |
|
CVE-2016-4447
|
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlParseElementDecl function in parser.c in libxml2 allows context-dependent … | There are no reported fixed by versions. |
|
CVE-2015-8806
|
Uncontrolled Resource Consumption dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application … | There are no reported fixed by versions. |
|
CVE-2017-18258
|
Allocation of Resources Without Limits or Throttling The xz_head function in xzlib.c in libxml2 allows remote attackers to cause a … | There are no reported fixed by versions. |
|
CVE-2016-1840
|
Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2, … | There are no reported fixed by versions. |
|
CVE-2015-7497
|
Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c … | There are no reported fixed by versions. |
|
CVE-2015-7498
|
Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c … | There are no reported fixed by versions. |
|
CVE-2015-5312
|
Uncontrolled Resource Consumption The xmlStringLenDecodeEntities function in parser.c in libxml2 does not properly prevent entity expansion, which allows context-dependent attackers … | There are no reported fixed by versions. |
|
CVE-2016-1833
|
Out-of-bounds Read The htmlCurrentChar function in libxml2, as used in Apple iOS, OS X, tvOS, and watchOS, allows remote attackers … | There are no reported fixed by versions. |
|
CVE-2015-8242
|
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlSAX2TextNode function in SAX2.c in the push interface … | There are no reported fixed by versions. |
|
CVE-2019-19956
|
Missing Release of Memory after Effective Lifetime xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 has a memory leak related to newDoc->oldNs. | There are no reported fixed by versions. |
|
CVE-2021-3541
|
Improper Restriction of Recursive Entity References in DTDs (XML Entity Expansion) A flaw was found in libxml2. Exponential entity expansion … | There are no reported fixed by versions. |
|
CVE-2016-4449
|
Improper Input Validation XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2, when not in validating … | There are no reported fixed by versions. |
|
CVE-2016-9598
|
Out-of-bounds Read libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service … | There are no reported fixed by versions. |
|
CVE-2015-7499
|
Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlGROW function in parser.c … | There are no reported fixed by versions. |
|
CVE-2012-2871
|
Uncontrolled Resource Consumption libxml2, as used in Google Chrome, does not properly support a cast of an unspecified variable during … | There are no reported fixed by versions. |
|
CVE-2016-1838
|
Out-of-bounds Read The xmlPArserPrintFileContextInternal function in libxml2, as used in Apple iOS, OS X, tvOS, and watchOS, allows remote attackers … | There are no reported fixed by versions. |
|
CVE-2017-16932
|
Loop with Unreachable Exit Condition ('Infinite Loop') parser.c in libxml2 does not prevent infinite recursion in parameter entities. | There are no reported fixed by versions. |
|
CVE-2015-8317
|
Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlParseXMLDecl function in parser.c in libxml2 allows context-dependent … | There are no reported fixed by versions. |
|
CVE-2016-1837
|
Use After Free Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2, as used in Apple … | There are no reported fixed by versions. |
|
CVE-2022-23308
|
Use After Free valid.c in libxml2 before 2.9.13, which is used by nuget/libxml2 has a use-after-free of `ID` and `IDREF` … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2012-5134
|
Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c … | |
|
CVE-2013-0339
|
Uncontrolled Resource Consumption libxml2 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader … | |
|
CVE-2013-0338
|
Improper Restriction of Operations within the Bounds of a Memory Buffer libxml2 allows context-dependent attackers to cause a denial of … | |
|
CVE-2010-4494
|
Double Free Double free vulnerability in libxml2 and other versions, as used in Google Chrome and other products, allows remote … | |
|
CVE-2010-4008
|
Improper Restriction of Operations within the Bounds of a Memory Buffer libxml2, as used in Google Chrome, Apple Safari, and … | |
|
CVE-2013-2877
|
Improper Restriction of Operations within the Bounds of a Memory Buffer parser.c in libxml2, as used in Google Chrome and … | |
|
CVE-2014-3660
|
Uncontrolled Resource Consumption parser.c in libxml2 does not properly prevent entity expansion even when entity substitution has been disabled, which … | |
|
CVE-2012-0841
|
Uncontrolled Resource Consumption libxml2 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers … | |
|
CVE-2011-1944
|
Integer Overflow Integer overflow in xpath.c in libxml2, and libxml, allows context-dependent attackers to cause a denial of service (crash) … |