İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Yüksek CVSS 7.5

CVE-2020-7595: Libxml2: güvenlik açığı

Yayın: · Güncelleme:

Açıklama (NVD)

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

Özet bilgiler

Ürün
Xmlsoft Libxml2
CVSS v3.1
7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
%7,84 (yüzdelik 95)
CWE
CWE-835
Yama
Mevcut

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
xmlsoft-libxml22.9.102.9.10—
fedoraproject-fedora3030—
fedoraproject-fedora3131—
fedoraproject-fedora3232—
canonical-ubuntu-linux12.0412.04—
canonical-ubuntu-linux14.0414.04—
canonical-ubuntu-linux16.0416.04—
canonical-ubuntu-linux18.0418.04—
canonical-ubuntu-linux19.1019.10—
debian-debian-linux9.09.0—
siemens-sinema-remote-connect-server——3.0
netapp-clustered-data-ontap———
netapp-smi-s-provider———
netapp-snapdrive———
netapp-steelstore-cloud-integrated-storage———
netapp-symantec-netbackup———
netapp-h300s-firmware———
netapp-h500s-firmware———
netapp-h700s-firmware———
netapp-h300e-firmware———
netapp-h500e-firmware———
netapp-h700e-firmware———
netapp-h410s-firmware———
netapp-h410c-firmware———
oracle-real-user-experience-insight13.3.1.013.3.1.0—
oracle-communications-cloud-native-core-network-function-cloud-native-environment1.10.01.10.0—
oracle-enterprise-manager-base-platform13.4.0.013.4.0.0—
oracle-enterprise-manager-base-platform13.5.0.013.5.0.0—
oracle-enterprise-manager-ops-center12.4.0.012.4.0.0—
oracle-mysql-workbench—8.0.26—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları