[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-5391-1 libxml2 -- libxml2

ID: oval:org.secpod.oval:def:610513Date: (C)2023-05-02   (M)2024-04-17
Class: PATCHFamily: unix




Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files. CVE-2023-28484 A NULL pointer dereference flaw when parsing invalid XML schemas may result in denial of service. CVE-2023-29469 It was reported that when hashing empty strings which aren"t null-terminated, xmlDictComputeFastKey could produce inconsistent results, which may lead to various logic or memory errors.

Platform:
Debian 11.x
Product:
python3-libxml2
libxml2
Reference:
DSA-5391-1
CVE-2023-28484
CVE-2023-29469
CVE    2
CVE-2023-29469
CVE-2023-28484
CPE    3
cpe:/a:xmlsoft:libxml2
cpe:/a:xmlsoft:python3-libxml2
cpe:/o:debian:debian_linux:11.x

© SecPod Technologies