Open mend-bolt-for-github[bot] opened 3 weeks ago
Library home page: https://source.codeaurora.org/quic/la/platform/external/libxml2/
Found in HEAD commit: 43bb56f33bd8282d18aa6e095f173d774542f4c3
Found in base branch: master
/xmlschemastypes.c
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Publish Date: 2020-09-03
URL: CVE-2020-24977
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: Low
Type: Upgrade version
Origin: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NQ5GTDYOVH26PBCPYXXMGW5ZZXWMGZC/
Release Date: 2020-09-04
Fix Resolution: 2.9.10-7
Step up your Open Source Security Game with Mend here
CVE-2020-24977 - Medium Severity Vulnerability
Library home page: https://source.codeaurora.org/quic/la/platform/external/libxml2/
Found in HEAD commit: 43bb56f33bd8282d18aa6e095f173d774542f4c3
Found in base branch: master
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Publish Date: 2020-09-03
URL: CVE-2020-24977
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: Low
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NQ5GTDYOVH26PBCPYXXMGW5ZZXWMGZC/
Release Date: 2020-09-04
Fix Resolution: 2.9.10-7
Step up your Open Source Security Game with Mend here