Total vulnerabilities in the database
The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.
| Software | From | Fixed in |
|---|---|---|
| hp / icewall_federation_agent | 3.0 | 3.0.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| canonical / ubuntu_linux | 16.04 | 16.04.x |
| canonical / ubuntu_linux | 15.10 | 15.10.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 7.0 | 7.0.x |
| oracle / vm_server | 3.4 | 3.4.x |
| oracle / vm_server | 3.3 | 3.3.x |
| apple / itunes | 12.4.1 | 12.4.1.x |
| apple / iphone_os | - | 9.3.2.x |
| apple / tvos | - | 9.2.1.x |
| apple / watchos | - | 2.2.1.x |
| apple / mac_os_x | - | 10.11.5.x |
| xmlsoft / libxml2 | - | 2.9.3.x |
| mcafee / web_gateway | 7.5.0.0 | 7.5.2.10.x |
| mcafee / web_gateway | 7.6.0.0 | 7.6.2.3.x |