Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libxml2 ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher beschriebene Auswirkungen zu erzielen.
Product
libxml ist ein C Parser und Toolkit, welches für das Gnome Projekt entwickelt wurde.
Vulnerabilities 4
-
Critical 9.1
Libxml: heap use after free (uaf) leads to denial of service (dos)
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML …
-
Critical 9.1
Libxml: type confusion leads to denial of service (dos)
A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of …
-
High 7.5
Libxml: null pointer dereference leads to denial of service (dos)
A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.
-
High 7.5
Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
Revision history
-
#54
Neue Updates von Red Hat aufgenommen
-
#53
Neue Updates von Red Hat aufgenommen
-
#52
Neue Updates von Dell aufgenommen
-
#51
Neue Updates von Dell aufgenommen
-
#50
Neue Updates von Oracle Linux aufgenommen
-
#49
Neue Updates von Oracle Linux aufgenommen
-
#48
Neue Updates von Red Hat aufgenommen
-
#47
Neue Updates von Dell aufgenommen
-
#46
Neue Updates von Tenable aufgenommen
-
#45
Neue Updates von Red Hat aufgenommen
-
#44
Neue Updates von Tenable aufgenommen
-
#43
Neue Updates von Meinberg aufgenommen
-
#42
Neue Updates von Red Hat aufgenommen
-
#41
Neue Updates von XEROX aufgenommen
-
#40
Neue Updates von Dell aufgenommen
-
#39
Neue Updates von Dell aufgenommen
-
#38
Neue Updates von Red Hat aufgenommen
-
#37
Neue Updates von Red Hat aufgenommen
-
#36
Neue Updates von Red Hat aufgenommen
-
#35
Neue Updates von Red Hat aufgenommen
-
#34
Neue Updates von Red Hat aufgenommen
-
#33
Neue Updates von Red Hat aufgenommen
-
#32
Neue Updates aufgenommen
-
#31
Neue Updates von Red Hat aufgenommen
-
#30
Neue Updates von Red Hat aufgenommen
References
-
Arch Linux Security Advisory ASA-202506-7 vom 2025-06-19
https://security.archlinux.org/ASA-202506-7
-
Amazon Linux Security Advisory ALAS-2025-2893 vom 2025-06-24
https://alas.aws.amazon.com/AL2/ALAS-2025-2893.html
-
GNOME Security vom 2025-06-11
https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2025
-
GNOME GitLab Issue 926 vom 2025-06-11
https://gitlab.gnome.org/GNOME/libxml2/-/issues/926
-
GNOME GitLab Issue 931 vom 2025-06-11
https://gitlab.gnome.org/GNOME/libxml2/-/issues/931
-
GNOME GitLab Issue 932 vom 2025-06-11
https://gitlab.gnome.org/GNOME/libxml2/-/issues/932
-
GNOME GitLab Issue 933 vom 2025-06-11
https://gitlab.gnome.org/GNOME/libxml2/-/issues/933
-
Amazon Linux Security Advisory ALAS2-2025-2893 vom 2025-06-30
https://alas.aws.amazon.com/AL2/ALAS2-2025-2893.html
-
Tenable Security Advisory TNS-2025-13 vom 2025-06-30
https://de.tenable.com/security/tns-2025-13
-
Red Hat Security Advisory RHSA-2025:10630 vom 2025-07-08
https://access.redhat.com/errata/RHSA-2025:10630
-
openSUSE Security Update OPENSUSE-SU-2025:15321-1 vom 2025-07-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6ENYT3VR7R5DYMOUMVW7VUSFZWAHIP53/
-
SUSE Security Update SUSE-SU-2025:02260-1 vom 2025-07-09
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021778.html
-
Red Hat Security Advisory RHSA-2025:10698 vom 2025-07-09
https://access.redhat.com/errata/RHSA-2025:10698
-
Red Hat Security Advisory RHSA-2025:10699 vom 2025-07-09
https://access.redhat.com/errata/RHSA-2025:10699
-
Oracle Linux Security Advisory ELSA-2025-10630 vom 2025-07-09
https://linux.oracle.com/errata/ELSA-2025-10630.html
-
Oracle Linux Security Advisory ELSA-2025-10699 vom 2025-07-10
https://linux.oracle.com/errata/ELSA-2025-10699.html
-
Oracle Linux Security Advisory ELSA-2025-10698 vom 2025-07-10
https://linux.oracle.com/errata/ELSA-2025-10698.html
-
SUSE Security Update SUSE-SU-2025:02275-1 vom 2025-07-10
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021788.html
-
NetApp Security Advisory NTAP-20250711-0009 vom 2025-07-11
https://security.netapp.com/advisory/NTAP-20250711-0009
-
SUSE Security Update SUSE-SU-2025:02294-1 vom 2025-07-11
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021799.html
-
SUSE Security Update SUSE-SU-2025:02314-1 vom 2025-07-15
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021818.html
-
IBM Security Bulletin 7239960 vom 2025-07-17
https://www.ibm.com/support/pages/node/7239960
-
Red Hat Security Advisory RHSA-2025:11386 vom 2025-07-17
https://access.redhat.com/errata/RHSA-2025:11386
-
SUSE Security Update SUSE-SU-2025:02355-1 vom 2025-07-17
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021844.html
-
Red Hat Security Advisory RHSA-2025:11396 vom 2025-07-18
https://access.redhat.com/errata/RHSA-2025:11396
-
Red Hat Security Advisory RHSA-2025:11580 vom 2025-07-23
https://access.redhat.com/errata/RHSA-2025:11580
-
Red Hat Security Advisory RHSA-2025:11673 vom 2025-07-29
https://access.redhat.com/errata/RHSA-2025:11673
-
Red Hat Security Advisory RHSA-2025:12099 vom 2025-07-29
https://access.redhat.com/errata/RHSA-2025:12099
-
Red Hat Security Advisory RHSA-2025:12098 vom 2025-07-29
https://access.redhat.com/errata/RHSA-2025:12098
-
Red Hat Security Advisory RHSA-2025:12199 vom 2025-07-29
https://access.redhat.com/errata/RHSA-2025:12199
-
Red Hat Security Advisory RHSA-2025:12237 vom 2025-07-30
https://access.redhat.com/errata/RHSA-2025:12237
-
Red Hat Security Advisory RHSA-2025:12240 vom 2025-07-30
https://access.redhat.com/errata/RHSA-2025:12240
-
Red Hat Security Advisory RHSA-2025:12241 vom 2025-07-30
https://access.redhat.com/errata/RHSA-2025:12241
-
Red Hat Security Advisory RHSA-2025:12239 vom 2025-07-30
https://access.redhat.com/errata/RHSA-2025:12239
-
Amazon Linux Security Advisory ALAS2-2025-2938 vom 2025-07-30
https://alas.aws.amazon.com/AL2/ALAS2-2025-2938.html
-
Oracle Linux Security Advisory ELSA-2025-12450 vom 2025-08-01
https://linux.oracle.com/errata/ELSA-2025-12450.html
-
Oracle Linux Security Advisory ELSA-2025-13203 vom 2025-08-07
http://linux.oracle.com/errata/ELSA-2025-13203.html
-
IBM Security Bulletin 7241565 vom 2025-08-06
https://www.ibm.com/support/pages/node/7241565
-
Red Hat Security Advisory RHSA-2025:13335 vom 2025-08-07
https://access.redhat.com/errata/RHSA-2025:13335
-
IBM Security Bulletin 7242015 vom 2025-08-12
https://www.ibm.com/support/pages/node/7242015
-
Red Hat Security Advisory RHSA-2025:13336 vom 2025-08-13
https://access.redhat.com/errata/RHSA-2025:13336
-
Red Hat Security Advisory RHSA-2025:13325 vom 2025-08-13
https://access.redhat.com/errata/RHSA-2025:13325
-
Oracle Linux Security Advisory ELSA-2025-12240 vom 2025-08-14
https://linux.oracle.com/errata/ELSA-2025-12240.html
-
Red Hat Security Advisory RHSA-2025:13289 vom 2025-08-14
https://access.redhat.com/errata/RHSA-2025:13289
-
Tenable Security Advisory TNS-2025-24 vom 2025-12-15
https://de.tenable.com/security/tns-2025-24
-
Ubuntu Security Notice USN-7694-1 vom 2025-08-20
https://ubuntu.com/security/notices/USN-7694-1
-
Red Hat Security Advisory RHSA-2025:14059 vom 2025-08-28
https://access.redhat.com/errata/RHSA-2025:14059
-
Red Hat Security Advisory RHSA-2025:14396 vom 2025-08-28
https://access.redhat.com/errata/RHSA-2025:14396
-
SUSE Security Update SUSE-SU-2025:20564-1 vom 2025-08-28
https://lists.suse.com/pipermail/sle-security-updates/2025-August/022316.html
-
SUSE Security Update SUSE-SU-2025:20607-1 vom 2025-08-29
https://lists.suse.com/pipermail/sle-security-updates/2025-August/022361.html
-
PDFreactor Release Notes vom 2025-09-05
https://www.pdfreactor.com/pdfreactor-12-3-now-available/
-
IBM Security Bulletin 7244160 vom 2025-09-05
https://www.ibm.com/support/pages/node/7244160
-
Hitachi Cybersecurity Advisory vom 2025-09-09
https://publisher.hitachienergy.com/preview?DocumentID=8DBD000220&LanguageCode=en&DocumentPartId=&Action=launch
-
IBM Security Bulletin 7244361 vom 2025-09-09
https://www.ibm.com/support/pages/node/7244361
-
Red Hat Security Advisory RHSA-2025:15308 vom 2025-09-11
https://access.redhat.com/errata/RHSA-2025:15308
-
Red Hat Security Advisory RHSA-2025:15827 vom 2025-09-15
https://access.redhat.com/errata/RHSA-2025:15827
-
Red Hat Security Advisory RHSA-2025:15828 vom 2025-09-15
https://access.redhat.com/errata/RHSA-2025:15828
-
Red Hat Security Advisory RHSA-2025:15672 vom 2025-09-18
https://access.redhat.com/errata/RHSA-2025:15672
-
fluent-package v5.0.8 release vom 2025-10-08
https://www.fluentd.org/blog/fluent-package-v5.0.8-has-been-released
-
Red Hat Security Advisory RHSA-2025:18219 vom 2025-10-16
https://access.redhat.com/errata/RHSA-2025:18219
-
Red Hat Security Advisory RHSA-2025:18217 vom 2025-10-22
https://access.redhat.com/errata/RHSA-2025:18217
-
Red Hat Security Advisory RHSA-2025:18218 vom 2025-10-22
https://access.redhat.com/errata/RHSA-2025:18218
-
Red Hat Security Advisory RHSA-2025:15397 vom 2025-10-22
https://access.redhat.com/errata/RHSA-2025:15397
-
Red Hat Security Advisory RHSA-2025:18240 vom 2025-10-23
https://access.redhat.com/errata/RHSA-2025:18240
-
Red Hat Security Advisory RHSA-2025:19020 vom 2025-10-27
https://access.redhat.com/errata/RHSA-2025:19020
-
Red Hat Security Advisory RHSA-2025:19046 vom 2025-10-29
https://access.redhat.com/errata/RHSA-2025:19046
-
Red Hat Security Advisory RHSA-2025:19041 vom 2025-10-30
https://access.redhat.com/errata/RHSA-2025:19041
-
Dell Security Advisory DSA-2025-404 vom 2025-10-31
https://www.dell.com/support/kbdoc/000385435
-
Dell Security Advisory DSA-2025-390 vom 2025-11-05
https://www.dell.com/support/kbdoc/000385230
-
XEROX Security Advisory XRX25-018 vom 2025-11-18
https://security.business.xerox.com/wp-content/uploads/2025/11/Xerox-Security-Bulletin-XRX25-018-Xerox-FreeFlow-Print-Server-v7.pdf
-
Red Hat Security Advisory RHSA-2025:21913 vom 2025-11-25
https://access.redhat.com/errata/RHSA-2025:21913
-
Meinberg Security Advisory MBGSA-2025.06 vom 2025-11-27
https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2025-06-lantime-firmware-v7-10-004.htm
-
Oracle Linux Security Advisory ELSA-2026-22420 vom 2026-06-30
https://linux.oracle.com/errata/ELSA-2026-22420.html
-
Red Hat Security Advisory RHSA-2026:0934 vom 2026-01-22
https://access.redhat.com/errata/RHSA-2026:0934
-
Tenable Security Advisory TNS-2026-02 vom 2026-01-27
https://de.tenable.com/security/tns-2026-02
-
Dell Security Advisory DSA-2026-152 vom 2026-03-23
https://www.dell.com/support/kbdoc/de-de/000443243/dsa-2026-152-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
-
Red Hat Security Advisory RHSA-2026:7519 vom 2026-04-22
https://access.redhat.com/errata/RHSA-2026:7519
-
Oracle Linux Security Advisory ELSA-2026-11349 vom 2026-04-28
https://linux.oracle.com/errata/ELSA-2026-11349.html
-
Dell Security Advisory DSA-2026-385 vom 2026-08-31
https://www.dell.com/support/kbdoc/de-de/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities
-
Dell Security Advisory DSA-2026-313 vom 2026-09-04
https://www.dell.com/support/kbdoc/de-de/000505510/dsa-2026-313-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities