Lucene search
GoogleOSV:DSA-2128-1HistoryDec 01, 2010 - 12:00 a.m.
libxml2 - potential code execution
2010-12-0100:00:00
Google
osv.dev
16
0.002 Low
EPSS
Percentile
54.2%
Bui Quang Minh discovered that libxml2, a library for parsing and
handling XML data files, does not well process a malformed XPATH,
causing crash and allowing arbitrary code execution.
For the stable distribution (lenny), this problem has been fixed in
version 2.6.32.dfsg-5+lenny2.
For the testing (squeeze) and unstable (sid) distribution, this problem
has been fixed in version 2.7.8.dfsg-1.
We recommend that you upgrade your libxml2 package.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libxml2 | eq | 2.6.32.dfsg-5+lenny1 | |
| libxml2 | eq | 2.6.32.dfsg-5 |
References
Related
securityvulns
securityvulns
[USN-1016-1] libxml2 vulnerability
2010-11-15 00:00:00
libxml2 memory corruption
2010-11-15 00:00:00
veracode
veracode
Denial Of Service (Dos)
2019-01-15 08:55:09
nessus
nessus
openSUSE Security Update : libxml2 (openSUSE-SU-2010:1004-1)
2011-05-05 00:00:00
openSUSE Security Update : libxml2 (openSUSE-SU-2010:1004-1)
2011-05-05 00:00:00
SuSE 11 / 11.1 Security Update : libxml2 (SAT Patch Numbers 3460 / 3461)
2010-12-02 00:00:00
debiancve
debiancve
CVE-2010-4008
2010-11-17 01:00:02
openvas
openvas
Ubuntu Update for libxml2 vulnerability USN-1016-1
2010-11-16 00:00:00
Ubuntu: Security Advisory (USN-1016-1)
2010-11-16 00:00:00
Apple Safari libxml Denial of Service Vulnerability
2010-11-23 00:00:00
prion
prion
Design/Logic Flaw
2010-11-17 01:00:00
Design/Logic Flaw
2010-11-06 00:00:00
nvd
nvd
CVE-2010-4008
2010-11-17 01:00:02
CVE-2010-4200
2010-11-06 00:00:02
ubuntu
ubuntu
libxml2 vulnerability
2010-11-10 00:00:00
cvelist
cvelist
CVE-2010-4008
2010-11-16 23:00:00
cve
cve
CVE-2010-4008
2010-11-17 01:00:02
CVE-2010-4200
2010-11-06 00:00:02
ubuntucve
ubuntucve
CVE-2010-4008
2010-11-08 00:00:00
debian
debian
[SECURITY] [DSA-2128-1] New libxml2 packages fix potential code execution
2010-12-01 20:15:40
[SECURITY] [DSA-2128-1] New libxml2 packages fix potential code execution
2010-12-01 20:15:40
gentoo
gentoo
libxml2: Multiple vulnerabilities
2011-10-26 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2012-01-11 00:00:00
libxml2 security and bug fix update
2011-12-14 00:00:00
mingw32-libxml2 security update
2013-01-31 00:00:00
centos
centos
libxml2 security update
2012-01-11 19:19:14
mingw32 security update
2013-02-01 00:53:30
redhat
redhat
(RHSA-2012:0017) Important: libxml2 security update
2012-01-11 00:00:00
(RHSA-2011:1749) Low: libxml2 security and bug fix update
2011-12-06 00:00:00
(RHSA-2013:0217) Important: mingw32-libxml2 security update
2013-01-31 00:00:00
vmware
vmware
VMware ESXi update to third party library
2012-07-12 00:00:00
VMware ESXi update to third party library
2012-07-12 00:00:00
VMware ESX updates to ESX Service Console
2012-04-26 00:00:00
freebsd
freebsd
openoffice.org -- Multiple vulnerabilities
2010-08-04 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47