https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:55:55 +0000 https://vulnerability.circl.lu/vuln/cve-2022-40303 <p>An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.</p> <p>An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.</p> https://vulnerability.circl.lu/vuln/cve-2022-40303 https://vulnerability.circl.lu/vuln/usn-5760-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libxml2, Ubuntu:20.04:LTS: libxml2, Ubuntu:22.04:LTS: libxml2</p> <p>It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash. (CVE-2022-2309)</p> <p>It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information or cause a crash. (CVE-2022-40303)</p> <p>It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-40304)</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libxml2, Ubuntu:20.04:LTS: libxml2, Ubuntu:22.04:LTS: libxml2</p> <p>It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash. (CVE-2022-2309)</p> <p>It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information or cause a crash. (CVE-2022-40303)</p> <p>It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-40304)</p> https://vulnerability.circl.lu/vuln/usn-5760-1