libxml2 - security update

Fixed packages 2

Vulnerabilities 7

• Critical 9.8
  CVE-2017-7375

  A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request e…

  libxml2 libxml2 Debian Ubuntu
  Feb 19, 2018
• High 7.5
  CVE-2017-9048

  libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementCont…

  libxml2 libxml2 Debian Ubuntu
  May 18, 2017
• High 7.5
  CVE-2017-9049

  libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey functio…

  libxml2 libxml2 Debian Ubuntu
  May 18, 2017
• High 7.5
  CVE-2017-9050

  Out-of-bounds read in nokogiri

  libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix f…

  libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  May 18, 2017
• Unscored —
  CVE-2017-0663

  A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arb…

  Google Android android libxml2 Android Debian Ubuntu
  Jun 14, 2017
• Unscored —
  CVE-2017-7376 Public exploit EPSS 23%

  Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port …

  libxml2 libxml2 Debian Ubuntu
  Feb 19, 2018
• Unscored —
  CVE-2017-9047

  A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in vali…

  libxml2 libxml2 Debian Ubuntu
  May 18, 2017