Orta CVSS 6.5 PoC var

CVE-2020-24977: Libxml2: sınır dışı okuma

Yayın: 4 Eylül 2020 03:15 · Güncelleme: 6 Kasım 2026 09:46

Açıklama (NVD)

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

Özet bilgiler

Ürün: Xmlsoft Libxml2
CVSS v3.1: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
EPSS: %2,98 (yüzdelik 87)
CWE: CWE-125
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
xmlsoft-libxml2	2.9.10	2.9.10	—
debian-debian-linux	9.0	9.0	—
fedoraproject-fedora	31	31	—
fedoraproject-fedora	32	32	—
fedoraproject-fedora	33	33	—
opensuse-leap	15.1	15.1	—
opensuse-leap	15.2	15.2	—
netapp-active-iq-unified-manager	7.3	—	—
netapp-active-iq-unified-manager	9.5	—	—
netapp-clustered-data-ontap	—	—	—
netapp-clustered-data-ontap-antivirus-connector	—	—	—
netapp-inventory-collect-tool	—	—	—
netapp-manageability-software-development-kit	—	—	—
netapp-snapdrive	—	—	—
netapp-snapdrive	—	—	—
netapp-hci-h410c-firmware	—	—	—
oracle-communications-cloud-native-core-network-function-cloud-native-environment	1.10.0	1.10.0	—
oracle-enterprise-manager-base-platform	13.4.0.0	13.4.0.0	—
oracle-enterprise-manager-base-platform	13.5.0.0	13.5.0.0	—
oracle-enterprise-manager-ops-center	12.4.0.0	12.4.0.0	—
oracle-http-server	12.2.1.3.0	12.2.1.3.0	—
oracle-http-server	12.2.1.4.0	12.2.1.4.0	—
oracle-mysql-workbench	—	8.0.26	—
oracle-peoplesoft-enterprise-peopletools	8.58	8.58	—
oracle-real-user-experience-insight	13.4.1.0	13.4.1.0	—
oracle-real-user-experience-insight	13.5.1.0	13.5.1.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları