Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/libxml2@2.9.4
purl pkg:nuget/libxml2@2.9.4
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (11)
Advisory Summary Fixed in package version
CVE-2016-5131

Use After Free Use-after-free vulnerability in libxml2, as used in Google Chrome, allows remote attackers to cause a denial of … There are no reported fixed by versions.
CVE-2016-9318

Improper Restriction of XML External Entity Reference libxml2, as used in XMLSec and other products, does not offer a flag … There are no reported fixed by versions.
CVE-2017-7375

Improper Restriction of XML External Entity Reference A flaw in libxml2 allows remote XML entity inclusion with default parser flags … There are no reported fixed by versions.
CVE-2017-9048

Improper Restriction of Operations within the Bounds of a Memory Buffer libxml2 is vulnerable to a stack-based buffer overflow. The … There are no reported fixed by versions.
CVE-2017-9049

Out-of-bounds Read libxml2 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs … There are no reported fixed by versions.
CVE-2017-8872

Out-of-bounds Read The htmlParseTryOrFinish function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (buffer over-read) or … There are no reported fixed by versions.
CVE-2017-9050

Out-of-bounds Read libxml2 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs … There are no reported fixed by versions.
CVE-2017-16931

Improper Restriction of Operations within the Bounds of a Memory Buffer parser.c in libxml2 mishandles parameter-entity references because the NEXTL … There are no reported fixed by versions.
CVE-2017-9047

Improper Restriction of Operations within the Bounds of a Memory Buffer A buffer overflow was discovered in libxml2 . The … There are no reported fixed by versions.
CVE-2016-1838

Out-of-bounds Read The xmlPArserPrintFileContextInternal function in libxml2, as used in Apple iOS, OS X, tvOS, and watchOS, allows remote attackers … There are no reported fixed by versions.
CVE-2017-16932

Loop with Unreachable Exit Condition ('Infinite Loop') parser.c in libxml2 does not prevent infinite recursion in parameter entities. There are no reported fixed by versions.
This package is not known to fix any advisories.