Known vulnerabilities in libxml2 (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
libxml2 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:libxml2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
38
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.9.13-14.el9_8.2
2.9.13-14.el9_8.1
2.9.7-21.el8_10.6
2.12.5-9.el10_0.1
2.9.13-12.el9_6.2
2.9.13-3.el9_2.11
2.9.7-16.el8_8.14
2.9.7-9.el8_4.10
2.9.7-21.el8_10.5
2.9.1-6.el7_9.14
2.9.7-13.el8_6.13
2.9.7-16.el8_8.13
2.9.7-9.el8_4.9
2.9.7-21.el8_10.4
2.9.13-12.el9_6.1
2.9.13-14.el9_7
2.9.13-1.el9_0.8
2.9.13-13.el9_4
2.9.13-3.el9_2.10
2.9.13-9.el9_6
2.9.7-16.el8_8.12
2.9.7-9.el8_4.8
2.9.1-6.el7_9.13
2.9.7-9.el8_2.5
2.9.7-13.el8_6.12
2.9.13-1.el9_0.7
2.9.13-3.el9_2.9
2.9.13-12.el9_4
2.9.1-6.el7_9.12
2.12.5-9.el10_0
2.9.13-12.el9_6
2.9.13-3.el9_2.8
2.9.7-16.el8_8.10
2.9.7-13.el8_6.11
2.9.7-9.el8_4.7
2.9.13-1.el9_0.6
2.9.7-9.el8_2.4
2.9.7-21.el8_10.3
2.9.7-21.el8_10.2
2.9.13-11.el9_6
2.9.7-9.el8_4.6
2.9.1-6.el7_9.10
2.9.7-16.el8_8.9
2.9.7-9.el8_2.3
2.9.13-3.el9_2.7
2.9.13-1.el9_0.5
2.9.7-13.el8_6.10
2.9.13-10.el9_4
2.9.13-10.el9_6
2.9.7-21.el8_10.1
2.7.6-21.el6_8.1
2.9.1-6.el7_2.3
2.7.6-20.el6_7.1
2.9.1-6.el7_2.2
2.9.7-19.el8_10
2.9.13-9.el9_4
2.9.1-6.el7_9.9
2.9.7-9.el8_4.5
2.9.7-13.el8_6.8
2.9.7-16.el8_8.7
2.9.13-6.el9_5.2
2.9.7-9.el8_2.1
2.9.13-1.el9_0.4
2.9.13-3.el9_2.6
2.9.7-18.el8_10.2
2.9.13-3.el9_2.4
2.9.13-6.el9_5.1
2.9.1-5.el7_1.2
2.7.6-17.el6_6.1
2.9.1-5.el7_0.1
2.7.6-14.el6_5.1
2.6.26-2.1.21.el5_9.1
2.7.6-12.el6_4.1
2.6.26-2.1.15.el5_8.6
2.7.6-8.el6_3.4
2.6.26-2.1.15.el5_8.5
2.7.6-8.el6_3.3
2.6.26-2.1.15.el5_8.2
2.7.6-4.el6_2.4
2.6.26-2.1.2.8.el5_6.2
2.7.6-4.el6_2.1
2.6.26-2.1.12.el5_7.2
2.9.7-18.el8_10.1
2.9.13-3.el9_2.3
2.9.7-16.el8_8.4
2.9.7-13.el8_6.5
2.9.13-6.el9_4
2.9.7-13.el8_6.4
2.9.13-5.el9_3
2.9.7-16.el8_8.2
2.9.7-13.el8_6.2
2.9.7-16.el8_8.1
2.9.13-3.el9_2.1
2.9.1-6.el7.4
2.9.13-3.el9_1
2.9.7-15.el8_7.1
2.9.7-15.el8
2.9.13-1.el9_0.1
2.9.7-12.el8_5
2.9.1-6.el7_9.6
2.9.7-9.el8_4.2
2.9.7-9.el8
2.9.7-8.el8
2.9.1-6.el7.5
2.9.7-7.el8
2.6.26-2.1.25.el5_11
2.7.6-21.el6_8
2.7.6-21.el6
2.7.6-20.el6_7
2.7.6-20.el6
2.7.6-17.el6_6
2.7.6-14.el6_5
2.7.6-14.el6
2.7.6-12.el6_4
2.7.6-8.el6_3
2.7.6-4.el6_2
2.7.6-4.el6
2.7.6-1.el6
Vulnerabilities (38)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU60922 - Use After Free CVE-2022-23308 |
CWE-416 | High | 2.9.7-12.el8_5 | 01.03.2022 |
SB2022030109 SB2022030110 SB2022031503 and 59 more |
||
| #VU57346 - Use After Free CVE-2016-4658 |
CWE-416 | High | 2.9.1-6.el7_9.6 | 13.10.2021 |
SB2016092503 SB2021101345 SB2021102109 and 9 more |
||
| #VU54225 - Use After Free CVE-2021-3518 |
CWE-416 | High | 2.9.7-9.el8_4.2 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 40 more |
||
| #VU54224 - Out-of-bounds write CVE-2021-3517 |
CWE-787 | High | 2.9.7-9.el8_4.2 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 42 more |
||
| #VU54223 - NULL Pointer Dereference CVE-2021-3537 |
CWE-476 | Medium | 2.9.7-9.el8_4.2 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 27 more |
||
| #VU54222 - Use After Free CVE-2021-3516 |
CWE-416 | High | 2.9.7-9.el8_4.2 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 28 more |
||
| #VU53289 - Improper input validation CVE-2021-3541 |
CWE-20 | Medium | 2.9.7-9.el8_4.2 | 16.05.2021 |
SB2021051601 SB2021051602 SB2021061811 and 32 more |
||
| #VU46737 - Out-of-bounds read CVE-2020-24977 |
CWE-125 | Medium | 2.9.7-9.el8 | 04.09.2020 |
SB2020091517 SB2020091519 SB2020091641 and 33 more |
||
| #VU33135 - Use After Free CVE-2016-5131 |
CWE-416 | High | 2.9.1-6.el7.4 | 03.08.2020 |
SB2016072303 SB2020081271 SB2017030129 and 10 more |
||
| #VU24489 - Missing release of memory after effective lifetime CVE-2019-19956 |
CWE-401 | Medium | 2.9.1-6.el7.5, 2.9.7-8.el8 | 22.01.2020 |
SB2019122405 SB2020021011 SB2020052301 and 24 more |
||
| #VU24488 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-7595 |
CWE-835 | Medium | 2.9.1-6.el7.5, 2.9.7-8.el8 | 22.01.2020 |
SB2020012220 SB2020021011 SB2020052301 and 30 more |
||
| #VU24487 - Missing release of memory after effective lifetime CVE-2019-20388 |
CWE-401 | Medium | 2.9.1-6.el7.5, 2.9.7-8.el8 | 22.01.2020 |
SB2020012220 SB2020052301 SB2020062607 and 28 more |
||
| #VU15364 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-9251 |
CWE-835 | Low | 2.9.7-7.el8 | 15.10.2018 |
SB2018101502 SB2018101503 SB2018100103 and 7 more |
||
| #VU15363 - Memory corruption CVE-2017-18258 |
CWE-119 | Low | 2.9.1-6.el7.4 | 12.10.2018 |
SB2018101503 SB2020081271 SB2022111901 and 2 more |
||
| #VU14470 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-14567 |
CWE-835 | Low | 2.9.1-6.el7.4 | 20.08.2018 |
SB2018082102 SB2018101502 SB2018101503 and 4 more |
||
| #VU13949 - NULL Pointer Dereference CVE-2018-14404 |
CWE-476 | Low | 2.9.1-6.el7.4, 2.9.7-7.el8 | 19.07.2018 |
SB2018072012 SB2018090705 SB2018101502 and 13 more |
||
| #VU9577 - Use After Free CVE-2017-15412 |
CWE-416 | High | 2.9.1-6.el7.4 | 07.12.2017 |
SB2017120705 SB2017120707 SB2017121304 and 16 more |
||
| #VU32381 - Resource Management Errors CVE-2015-8035 |
CWE-399 | Low | 2.9.1-6.el7.4 | 18.11.2015 |
SB2015111803 SB2020081271 SB2015112809 and 7 more |
Showing elements 21 - 40 out of 38