Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-1944
HistorySep 02, 2011 - 4:55 p.m.

CVE-2011-1944

2011-09-0216:55:03
CWE-189
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.9 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON

Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.

Affected configurations

NVD
Node
xmlsoftlibxml2Match2.6.0
OR
xmlsoftlibxml2Match2.6.1
OR
xmlsoftlibxml2Match2.6.2
OR
xmlsoftlibxml2Match2.6.3
OR
xmlsoftlibxml2Match2.6.4
OR
xmlsoftlibxml2Match2.6.5
OR
xmlsoftlibxml2Match2.6.6
OR
xmlsoftlibxml2Match2.6.7
OR
xmlsoftlibxml2Match2.6.8
OR
xmlsoftlibxml2Match2.6.9
OR
xmlsoftlibxml2Match2.6.11
OR
xmlsoftlibxml2Match2.6.12
OR
xmlsoftlibxml2Match2.6.13
OR
xmlsoftlibxml2Match2.6.14
OR
xmlsoftlibxml2Match2.6.16
OR
xmlsoftlibxml2Match2.6.17
OR
xmlsoftlibxml2Match2.6.18
OR
xmlsoftlibxml2Match2.6.20
OR
xmlsoftlibxml2Match2.6.22
OR
xmlsoftlibxml2Match2.6.26
OR
xmlsoftlibxml2Match2.6.27
OR
xmlsoftlibxml2Match2.6.30
OR
xmlsoftlibxml2Match2.6.32
Node
xmlsoftlibxml2Match2.7.0
OR
xmlsoftlibxml2Match2.7.1
OR
xmlsoftlibxml2Match2.7.2
OR
xmlsoftlibxml2Match2.7.3
OR
xmlsoftlibxml2Match2.7.4
OR
xmlsoftlibxml2Match2.7.5
OR
xmlsoftlibxml2Match2.7.6
OR
xmlsoftlibxml2Match2.7.7
OR
xmlsoftlibxml2Match2.7.8
Node
xmlsoftlibxmlRange≤1.8.16
OR
xmlsoftlibxmlMatch1.5.0
OR
xmlsoftlibxmlMatch1.6.0
OR
xmlsoftlibxmlMatch1.6.1
OR
xmlsoftlibxmlMatch1.6.2
OR
xmlsoftlibxmlMatch1.7.0
OR
xmlsoftlibxmlMatch1.7.1
OR
xmlsoftlibxmlMatch1.7.2
OR
xmlsoftlibxmlMatch1.7.3
OR
xmlsoftlibxmlMatch1.7.4
OR
xmlsoftlibxmlMatch1.8.0
OR
xmlsoftlibxmlMatch1.8.1
OR
xmlsoftlibxmlMatch1.8.2
OR
xmlsoftlibxmlMatch1.8.3
OR
xmlsoftlibxmlMatch1.8.4
OR
xmlsoftlibxmlMatch1.8.5
OR
xmlsoftlibxmlMatch1.8.6
OR
xmlsoftlibxmlMatch1.8.7
OR
xmlsoftlibxmlMatch1.8.8
OR
xmlsoftlibxmlMatch1.8.9
OR
xmlsoftlibxmlMatch1.8.10
OR
xmlsoftlibxmlMatch1.8.11
OR
xmlsoftlibxmlMatch1.8.12
OR
xmlsoftlibxmlMatch1.8.13
OR
xmlsoftlibxmlMatch1.8.14
OR
xmlsoftlibxmlMatch1.8.15

References

Related

openvas 38
freebsd 1
nessus 40
fedora 4
veracode 1
ubuntucve 1
cvelist 2
prion 2
ubuntu 1
debiancve 1
cve 2
securityvulns 8
nvd 1
oraclelinux 5
gentoo 1
centos 2
thn 1
redhat 4
vmware 4
tenable 1
oracle 1
openvas
openvas
Ubuntu Update for libxml2 USN-1153-1
2011-06-20 00:00:00
FreeBSD Ports: libxml
2012-02-13 00:00:00
Ubuntu: Security Advisory (USN-1153-1)
2011-06-20 00:00:00
freebsd
freebsd
libxml -- Integer overflow
2011-09-02 00:00:00
nessus
nessus
FreeBSD : libxml -- Integer overflow (7be92050-a450-11e2-9898-001060e06fd4)
2013-04-14 00:00:00
SuSE 11.1 Security Update : libxml2 (SAT Patch Number 4813)
2011-07-27 00:00:00
openSUSE Security Update : libxml2 (openSUSE-SU-2011:0839-1)
2014-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: libxml-1.8.17-27.fc14
2011-07-02 19:27:30
[SECURITY] Fedora 15 Update: libxml-1.8.17-27.fc15
2011-07-02 19:29:06
[SECURITY] Fedora 17 Update: libxml2-2.7.8-9.fc17
2012-09-26 08:56:06
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:52:19
ubuntucve
ubuntucve
CVE-2011-1944
2011-06-06 00:00:00
cvelist
cvelist
CVE-2011-1944
2011-09-02 16:00:00
CVE-2014-6571
2015-01-21 15:00:00
prion
prion
Integer overflow
2011-09-02 16:55:00
Design/Logic Flaw
2015-01-21 15:28:00
ubuntu
ubuntu
libxml2 vulnerability
2011-06-16 00:00:00
debiancve
debiancve
CVE-2011-1944
2011-09-02 16:55:03
cve
cve
CVE-2011-1944
2011-09-02 16:55:03
CVE-2014-6571
2015-01-21 15:28:10
securityvulns
securityvulns
[USN-1153-1] libxml2 vulnerability
2011-06-19 00:00:00
libxml2 memory corruption
2011-10-16 00:00:00
Apple TV multiple security vulnerabilities
2012-10-04 00:00:00
nvd
nvd
CVE-2014-6571
2015-01-21 15:28:10
oraclelinux
oraclelinux
libxml2 security update
2013-02-28 00:00:00
libxml2 security update
2012-01-11 00:00:00
libxml2 security and bug fix update
2011-12-14 00:00:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2011-10-26 00:00:00
centos
centos
libxml2 security update
2012-01-11 19:19:14
mingw32 security update
2013-02-01 00:53:30
thn
thn
Oracle releases 169 Updates, Including 19 Patches for JAVA Vulnerabilities
2015-01-21 08:36:00
redhat
redhat
(RHSA-2011:1749) Low: libxml2 security and bug fix update
2011-12-06 00:00:00
(RHSA-2012:0017) Important: libxml2 security update
2012-01-11 00:00:00
(RHSA-2013:0217) Important: mingw32-libxml2 security update
2013-01-31 00:00:00
vmware
vmware
VMware ESXi update to third party library
2012-07-12 00:00:00
VMware ESX updates to ESX Service Console
2012-04-26 00:00:00
VMware ESXi update to third party library
2012-07-12 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.9 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON
Related for NVD:CVE-2011-1944
openvas38freebsd1nessus40fedora4veracode1ubuntucve1cvelist2prion2ubuntu1debiancve1cve2securityvulns8nvd1oraclelinux5gentoo1centos2thn1redhat4vmware4tenable1oracle1