CVE-2020-24977
04.09.2020, 00:15
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.Enginsight
| Vendor | Product | Version |
|---|---|---|
| xmlsoft | libxml2 | 2.9.10 |
| debian | debian_linux | 9.0 |
| opensuse | leap | 15.1 |
| opensuse | leap | 15.2 |
| netapp | active_iq_unified_manager | 7.3 ≤ |
| netapp | active_iq_unified_manager | 9.5 ≤ |
| netapp | clustered_data_ontap | - |
| netapp | clustered_data_ontap_antivirus_connector | - |
| netapp | inventory_collect_tool | - |
| netapp | manageability_software_development_kit | - |
| netapp | snapdrive | - |
| netapp | snapdrive | - |
| netapp | hci_h410c_firmware | - |
| oracle | communications_cloud_native_core_network_function_cloud_native_environment | 1.10.0 |
| oracle | enterprise_manager_base_platform | 13.4.0.0 |
| oracle | enterprise_manager_base_platform | 13.5.0.0 |
| oracle | enterprise_manager_ops_center | 12.4.0.0 |
| oracle | http_server | 12.2.1.3.0 |
| oracle | http_server | 12.2.1.4.0 |
| oracle | mysql_workbench | 𝑥 ≤ 8.0.26 |
| oracle | peoplesoft_enterprise_peopletools | 8.58 |
| oracle | real_user_experience_insight | 13.4.1.0 |
| oracle | real_user_experience_insight | 13.5.1.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libxml2 |
|
Common Weakness Enumeration
References