SecuritySpace - CVE-2023-39615

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2023-39615

Description: ** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Test IDs: 1.3.6.1.4.1.25623.1.1.10.2023.0279 1.3.6.1.4.1.25623.1.0.833291 1.3.6.1.4.1.25623.1.0.833079 1.3.6.1.4.1.25623.1.1.4.2023.3698.1 1.3.6.1.4.1.25623.1.0.833847

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2023-39615
https://gitlab.gnome.org/GNOME/libxml2/-/issues/535

CVE ID:	CVE-2023-39615
Description:	DISPUTED Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2023.0279 1.3.6.1.4.1.25623.1.0.833291 1.3.6.1.4.1.25623.1.0.833079 1.3.6.1.4.1.25623.1.1.4.2023.3698.1 1.3.6.1.4.1.25623.1.0.833847
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2023-39615 https://gitlab.gnome.org/GNOME/libxml2/-/issues/535