Xmlsoft

Xmllint

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-34459

  • EPSS 0.21%
  • Published 14.05.2024 15:39:11
  • Last modified 21.11.2024 09:18:43

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

7.8

CVE-2021-3516

Exploit
  • EPSS 0.36%
  • Published 01.06.2021 14:15:10
  • Last modified 21.11.2024 06:21:43

There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availabi...