← Terug naar CVE-database
Beschrijving
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.
Vendors
Xmlsoft
Redhat
Fedoraproject
Debian
Netapp
Oracle
Affected products
Libxml2
Jboss Core Services
Enterprise Linux
Fedora
Debian Linux
Active Iq Unified Manager
Clustered Data Ontap
Clustered Data Ontap Antivirus Connector
E-series Santricity Os Controller
E-series Santricity Storage Manager
E-series Santricity Web Services
Hci Management Node
Manageability Software Development Kit
Oncommand Insight
Oncommand Workflow Automation
Ontap Select Deploy Administration Utility
Santricity Unified Manager
Snapdrive
Snapmanager
Solidfire
Hci H410c Firmware
Hci H410c
Communications Cloud Native Core Network Function Cloud Native Environment
Enterprise Manager Base Platform
Mysql Workbench
Openjdk
Peoplesoft Enterprise Peopletools
Real User Experience Insight
Zfs Storage Appliance Kit