Known vulnerabilities in libxml2 (Alpine package)

Vendor: Alpine Linux Development Team
Software: libxml2 (Alpine package)
Software CPE: cpe:2.3:o:alpine:libxml2_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 32
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libxml2 (Alpine package) libxml2 (Alpine package) is affected by 32 known vulnerabilities: 4 high, 23 medium, 5 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46737 - Out-of-bounds read
CVE-2020-24977		 CWE-125 Medium
No
No
 2.9.10-r5 04.09.2020 SB2020091517
SB2020091519
SB2020091641
and 33 more
#VU33135 - Use After Free
CVE-2016-5131		 CWE-416 High
No
No
 2.9.4-r1 03.08.2020 SB2016072303
SB2020081271
SB2017030129
and 10 more
#VU24489 - Missing release of memory after effective lifetime
CVE-2019-19956		 CWE-401 Medium
No
No
 2.9.8-r2, 2.9.9-r2 22.01.2020 SB2019122405
SB2020021011
SB2020052301
and 24 more
#VU24488 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-7595		 CWE-835 Medium
No
No
 2.9.10-r2 22.01.2020 SB2020012220
SB2020021011
SB2020052301
and 30 more
#VU24487 - Missing release of memory after effective lifetime
CVE-2019-20388		 CWE-401 Medium
No
No
 2.9.10-r3 22.01.2020 SB2020012220
SB2020052301
SB2020062607
and 28 more
#VU15364 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-9251		 CWE-835 Low
No
No
 2.9.8-r1 15.10.2018 SB2018101502
SB2018101503
SB2018100103
and 7 more
#VU14470 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-14567		 CWE-835 Low
No
No
 2.9.8-r1 20.08.2018 SB2018082102
SB2018101502
SB2018101503
and 4 more
#VU13949 - NULL Pointer Dereference
CVE-2018-14404		 CWE-476 Low
No
No
 2.9.8-r1 19.07.2018 SB2018072012
SB2018090705
SB2018101502
and 13 more
#VU32048 - Memory corruption
CVE-2017-16931		 CWE-119 High
No
No
 2.9.5-r0 23.11.2017 SB2017112313
SB2018012327
SB2023050416
#VU32077 - Improper input validation
CVE-2017-5969		 CWE-20 Medium
No
No
 2.9.4-r3, 2.9.4-r4 11.04.2017 SB2017041154
SB2017061637
SB2017111019
#VU31830 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-9318		 CWE-611 Low
No
No
 2.9.4-r2 16.11.2016 SB2016111607
SB2017041322
SB2017111019
and 3 more
#VU32142 - Data Handling
CVE-2016-5153		 CWE-19 High
No
No
 2.9.4-r1 11.09.2016 SB2016091102
SB2017030127
#VU31950 - Out-of-bounds read
CVE-2016-1839		 CWE-125 Medium
No
No
 2.9.2-r2 20.05.2016 SB2016052005
SB2016061414
#VU31951 - Memory corruption
CVE-2016-2073		 CWE-119 Medium
No
No
 2.9.1-r4 12.02.2016 SB2016021202
SB2016060210
#VU32291 - Out-of-bounds read
CVE-2015-8317		 CWE-125 Medium
No
No
 2.9.1-r4 15.12.2015 SB2015121505
SB2016060209
SB2015121403
#VU32290 - Memory corruption
CVE-2015-8241		 CWE-119 Medium
No
No
 2.9.1-r4 15.12.2015 SB2015121504
SB2016060208
SB2015121403
#VU32388 - Heap-based Buffer Overflow
CVE-2015-7498		 CWE-122 Medium
No
No
 2.9.1-r3, 2.9.1-r4 15.12.2015 SB2015121511
SB2015112804
SB2015121403
and 2 more
#VU32387 - Heap-based Buffer Overflow
CVE-2015-7497		 CWE-122 Medium
No
No
 2.9.1-r3, 2.9.1-r4 15.12.2015 SB2015121510
SB2015112803
SB2015121403
and 2 more
#VU32386 - Resource Management Errors
CVE-2015-5312		 CWE-399 Medium
No
No
 2.9.1-r3, 2.9.1-r4 15.12.2015 SB2015121509
SB2015112802
SB2015121403
and 2 more
#VU32385 - Resource Management Errors
CVE-2015-1819		 CWE-399 Medium
No
No
 2.9.1-r3, 2.9.1-r4 14.08.2015 SB2015081404
SB2015112801
SB2015121403
and 3 more


Showing elements 1 - 20 out of 32