CVE-2020-7595
21.01.2020, 23:15
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Infinite Loop
| Vendor | Product | Version |
|---|---|---|
| xmlsoft | libxml2 | 2.9.10 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.10 |
| debian | debian_linux | 9.0 |
| siemens | sinema_remote_connect_server | 𝑥 < 3.0 |
| netapp | clustered_data_ontap | - |
| netapp | smi-s_provider | - |
| netapp | snapdrive | - |
| netapp | steelstore_cloud_integrated_storage | - |
| netapp | symantec_netbackup | - |
| netapp | h300s_firmware | - |
| netapp | h500s_firmware | - |
| netapp | h700s_firmware | - |
| netapp | h300e_firmware | - |
| netapp | h500e_firmware | - |
| netapp | h700e_firmware | - |
| netapp | h410s_firmware | - |
| netapp | h410c_firmware | - |
| oracle | real_user_experience_insight | 13.3.1.0 |
| oracle | communications_cloud_native_core_network_function_cloud_native_environment | 1.10.0 |
| oracle | enterprise_manager_base_platform | 13.4.0.0 |
| oracle | enterprise_manager_base_platform | 13.5.0.0 |
| oracle | enterprise_manager_ops_center | 12.4.0.0 |
| oracle | mysql_workbench | 𝑥 ≤ 8.0.26 |
| oracle | peoplesoft_enterprise_peopletools | 8.58 |
| oracle | real_user_experience_insight | 13.4.1.0 |
| oracle | real_user_experience_insight | 13.5.1.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References