CVE-2019-19956
24.12.2019, 16:15
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| xmlsoft | libxml2 | 𝑥 < 2.9.10 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| oracle | real_user_experience_insight | 13.3.1.0 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.10 |
| netapp | active_iq_unified_manager | - |
| netapp | clustered_data_ontap | - |
| netapp | clustered_data_ontap_antivirus_connector | - |
| netapp | manageability_software_development_kit | - |
| netapp | ontap_select_deploy_administration_utility | - |
| netapp | steelstore_cloud_integrated_storage | - |
| siemens | sinema_remote_connect_server | 𝑥 < 3.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libxml2-2 |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| libxml2-2-32bit |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| libxml2-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| libxml2-doc |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| libxml2-tools |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| python-libxml2 |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| python3-libxml2 |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| python3-libxml2-python |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
- CWE-401 - Missing Release of Memory after Effective LifetimeThe software does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
- CWE-772 - Missing Release of Resource after Effective LifetimeThe software does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
References