Red Hat Security AdvisoryRHSA-2013:0217
mingw32-libxml2 security update
Released 2013-01-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) mingw32-libxml2-2.7.6-6.el6_3, mingw32-libxml2-static-2.7.6-6.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mingw32-libxml2-2.7.6-6.el6_3, mingw32-libxml2-static-2.7.6-6.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) mingw32-libxml2-2.7.6-6.el6_3, mingw32-libxml2-static-2.7.6-6.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) mingw32-libxml2-2.7.6-6.el6_3, mingw32-libxml2-static-2.7.6-6.el6_3
Fixes 11 records
Priority MEDIUM 55
Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary c…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13432 · Published 2011-09-02 · Partial fix CWE-189
Priority MEDIUM 48
Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04994 · Published 2011-07-21 · Fixed CWE-189
Priority MEDIUM 42
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impac…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05932 · Published 2010-12-07 · Fixed CWE-415
Priority LOW 38
Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02476 · Published 2012-01-07 · Fixed CWE-787
Priority LOW 37
Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04382 · Published 2012-11-28 · Fixed CWE-119
Priority LOW 36
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01693 · Published 2011-08-29 · Fixed CWE-415
Priority LOW 35
Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unkno…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0263 · Published 2012-05-16 · Fixed CWE-189
Priority LOW 34
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02045 · Published 2011-09-17 · Fixed CWE-415
Priority LOW 29
libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML da…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0326 · Published 2012-12-21 · Partial fix CWE-399
Priority LOW 26
libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01599 · Published 2011-12-13 · Fixed CWE-125
Priority LOW 25
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows con…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02703 · Published 2010-11-16 · Fixed CWE-119