Create an account

Subscribe to LWN

LWN.net Weekly Edition for May 23, 2013

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

libxml2: code execution

Package(s):

libxml2

CVE #(s):

CVE-2011-0216

Created:

December 7, 2011

Updated:

September 27, 2012

Description:

The libxml2 library contains an off-by-one error leading to a buffer overflow vulnerability exploitable via a specially-crafted XML file.

Alerts:

Mandriva	MDVSA-2011:188	2011-12-15
Scientific Linux	SL-libx-20111206	2011-12-06
Red Hat	RHSA-2011:1749-03	2011-12-06
Red Hat	RHSA-2012:0016-01	2012-01-11
Red Hat	RHSA-2012:0017-01	2012-01-11
CentOS	CESA-2012:0016	2012-01-11
CentOS	CESA-2012:0017	2012-01-11
Oracle	ELSA-2012-0016	2012-01-12
Scientific Linux	SL-libx-20120111	2012-01-11
Scientific Linux	SL-libx-20120112	2012-01-12
Oracle	ELSA-2012-0017	2012-01-12
Ubuntu	USN-1334-1	2012-01-19
Debian	DSA-2394-1	2012-01-26
Oracle	ELSA-2012-0324	2012-03-09
Fedora	FEDORA-2012-13820	2012-09-26
Fedora	FEDORA-2012-13824	2012-09-27
Red Hat	RHSA-2013:0217-01	2013-01-31
CentOS	CESA-2013:0217	2013-02-01
Oracle	ELSA-2013-0217	2013-02-01
Scientific Linux	SL-ming-20130201	2013-02-01

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds