CVE-2025-27113
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
- Обновитесь до 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости libxml2 · Страница 2
За последние 30 дней в libxml2 опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 26
CVE-2025-24928
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.
- Обновитесь до 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Опубликовано ОбновленоCVE-2024-56171
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Обновитесь до 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Опубликовано ОбновленоCVE-2022-49043
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
- Обновитесь до 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Опубликовано ОбновленоCVE-2024-34459
An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.
- Обновитесь до 2.9.4+dfsg1-6.1ubuntu1.9+esm2
Опубликовано ОбновленоCVE-2024-25062
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.
- Обновитесь до 2.9.4+dfsg1-6.1ubuntu1.9+esm1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.