VulnerableCode Package Details - pkg:nuget/libxml2@2.7.8.6

Vulnerabilities affecting this package (48)

Advisory	Summary	Fixed in package version
CVE-2016-5131	Use After Free Use-after-free vulnerability in libxml2, as used in Google Chrome, allows remote attackers to cause a denial of …	There are no reported fixed by versions.
CVE-2016-1839	Out-of-bounds Read The xmlDictAddString function in libxml2, as used in Apple iOS, OS X, tvOS, and watchOS, allows remote attackers …	There are no reported fixed by versions.
CVE-2016-9318	Improper Restriction of XML External Entity Reference libxml2, as used in XMLSec and other products, does not offer a flag …	There are no reported fixed by versions.
CVE-2016-3627	Improper Input Validation The xmlStringGetNodeList function in tree.c in libxml2, when used in recovery mode, allows context-dependent attackers to cause …	There are no reported fixed by versions.
CVE-2017-5130	Out-of-bounds Write An integer overflow in xmlmemory.c in libxml2, as used in Google Chrome and other products, allowed a remote …	There are no reported fixed by versions.
CVE-2016-9596	Uncontrolled Resource Consumption libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers …	There are no reported fixed by versions.
CVE-2015-7500	Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlParseMisc function in parser.c in libxml2 allows context-dependent …	There are no reported fixed by versions.
CVE-2021-3518	Use After Free There's a flaw in libxml2 An attacker who is able to submit a crafted file to be …	There are no reported fixed by versions.
CVE-2016-4483	Deserialization of Untrusted Data The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service …	There are no reported fixed by versions.
CVE-2021-3517	Out-of-bounds Write There is a flaw in the xml entity encoding functionality of libxml2 The most likely impact of this …	There are no reported fixed by versions.
CVE-2016-4658	Improper Restriction of Operations within the Bounds of a Memory Buffer xpointer.c in libxml2 (as used in Apple iOS, OS …	There are no reported fixed by versions.
CVE-2022-40304	Improper Restriction of XML External Entity Reference An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions …	There are no reported fixed by versions.
CVE-2015-8710	Improper Restriction of Operations within the Bounds of a Memory Buffer The htmlParseComment function in HTMLparser.c in libxml2 allows attackers …	There are no reported fixed by versions.
CVE-2017-7375	Improper Restriction of XML External Entity Reference A flaw in libxml2 allows remote XML entity inclusion with default parser flags …	There are no reported fixed by versions.
CVE-2021-3537	NULL Pointer Dereference A vulnerability found in libxml2 shows that it does not propagate errors while parsing XML mixed content, …	There are no reported fixed by versions.
CVE-2015-8241	Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlNextChar function in libxml2 does not properly check …	There are no reported fixed by versions.
CVE-2016-4448	Use of Externally-Controlled Format String Format string vulnerability in libxml2 allows attackers to have unspecified impact via format string specifiers …	There are no reported fixed by versions.
CVE-2022-40303	Integer Overflow or Wraparound An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the …	There are no reported fixed by versions.
CVE-2017-7376	Improper Restriction of Operations within the Bounds of a Memory Buffer Buffer overflow in libxml2 allows remote attackers to execute …	There are no reported fixed by versions.
CVE-2016-1834	Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlStrncat function in libxml2, …	There are no reported fixed by versions.
CVE-2017-15412	Use After Free Use after free in libxml2, as used in Google Chrome and other products, allowed a remote attacker …	There are no reported fixed by versions.
CVE-2018-14404	NULL Pointer Dereference A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 when parsing an invalid XPath …	There are no reported fixed by versions.
CVE-2016-1836	Use After Free Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2, as used in Apple iOS, OS X, tvOS, and …	There are no reported fixed by versions.
CVE-2016-1762	Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlNextChar function in libxml2 allows remote attackers to …	There are no reported fixed by versions.
CVE-2016-2073	Improper Restriction of Operations within the Bounds of a Memory Buffer The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers …	There are no reported fixed by versions.
CVE-2017-16931	Improper Restriction of Operations within the Bounds of a Memory Buffer parser.c in libxml2 mishandles parameter-entity references because the NEXTL …	There are no reported fixed by versions.
CVE-2022-29824	Integer Overflow or Wraparound In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check …	There are no reported fixed by versions.
CVE-2023-39615	Improper Restriction of Operations within the Bounds of a Memory Buffer Xmlsoft Libxml2 v2.11.0 was discovered to contain a global …	There are no reported fixed by versions.
CVE-2016-4447	Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlParseElementDecl function in parser.c in libxml2 allows context-dependent …	There are no reported fixed by versions.
CVE-2015-8806	Uncontrolled Resource Consumption dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application …	There are no reported fixed by versions.
CVE-2017-18258	Allocation of Resources Without Limits or Throttling The xz_head function in xzlib.c in libxml2 allows remote attackers to cause a …	There are no reported fixed by versions.
CVE-2016-1840	Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2, …	There are no reported fixed by versions.
CVE-2015-7497	Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c …	There are no reported fixed by versions.
CVE-2015-7498	Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c …	There are no reported fixed by versions.
CVE-2015-5312	Uncontrolled Resource Consumption The xmlStringLenDecodeEntities function in parser.c in libxml2 does not properly prevent entity expansion, which allows context-dependent attackers …	There are no reported fixed by versions.
CVE-2016-1833	Out-of-bounds Read The htmlCurrentChar function in libxml2, as used in Apple iOS, OS X, tvOS, and watchOS, allows remote attackers …	There are no reported fixed by versions.
CVE-2015-8242	Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlSAX2TextNode function in SAX2.c in the push interface …	There are no reported fixed by versions.
CVE-2019-19956	Missing Release of Memory after Effective Lifetime xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 has a memory leak related to newDoc->oldNs.	There are no reported fixed by versions.
CVE-2021-3541	Improper Restriction of Recursive Entity References in DTDs (XML Entity Expansion) A flaw was found in libxml2. Exponential entity expansion …	There are no reported fixed by versions.
CVE-2016-4449	Improper Input Validation XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2, when not in validating …	There are no reported fixed by versions.
CVE-2016-9598	Out-of-bounds Read libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service …	There are no reported fixed by versions.
CVE-2015-7499	Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlGROW function in parser.c …	There are no reported fixed by versions.
CVE-2012-2871	Uncontrolled Resource Consumption libxml2, as used in Google Chrome, does not properly support a cast of an unspecified variable during …	There are no reported fixed by versions.
CVE-2016-1838	Out-of-bounds Read The xmlPArserPrintFileContextInternal function in libxml2, as used in Apple iOS, OS X, tvOS, and watchOS, allows remote attackers …	There are no reported fixed by versions.
CVE-2017-16932	Loop with Unreachable Exit Condition ('Infinite Loop') parser.c in libxml2 does not prevent infinite recursion in parameter entities.	There are no reported fixed by versions.
CVE-2015-8317	Improper Restriction of Operations within the Bounds of a Memory Buffer The xmlParseXMLDecl function in parser.c in libxml2 allows context-dependent …	There are no reported fixed by versions.
CVE-2016-1837	Use After Free Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2, as used in Apple …	There are no reported fixed by versions.
CVE-2022-23308	Use After Free valid.c in libxml2 before 2.9.13, which is used by nuget/libxml2 has a use-after-free of `ID` and `IDREF` …	There are no reported fixed by versions.

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk score