Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-4494

Fixed in a distro release EPSS 6%

Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

Published 2010-12-07 · CVE record · OSV

Products: google chrome, xmlsoft libxml2, apple itunes, apple safari, apple iphone_os, apple mac_os_x, opensuse, suse_linux_enterprise_server, fedoraproject fedora, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux, hp insight_control_server_deployment, hp rapid_deployment_pack, apache openoffice

Distro releases

ReleasePackageFixed in
Debian 12libxml22.7.8.dfsg-2
Debian 13libxml22.7.8.dfsg-2
Debian 14libxml22.7.8.dfsg-2
Debian 5.0libxml22.6.32.dfsg-5+lenny3
Red Hat Enterprise Linux 6libxml20:2.7.6-4.el6
Red Hat Enterprise Linux 6libxml2-debuginfo0:2.7.6-4.el6
Red Hat Enterprise Linux 6libxml2-devel0:2.7.6-4.el6
Red Hat Enterprise Linux 6libxml2-python0:2.7.6-4.el6
Red Hat Enterprise Linux 6libxml2-static0:2.7.6-4.el6
Red Hat Enterprise Linux 6mingw32-libxml20:2.7.6-6.el6_3
Red Hat Enterprise Linux 6mingw32-libxml2-debuginfo0:2.7.6-6.el6_3
Red Hat Enterprise Linux 6mingw32-libxml2-static0:2.7.6-6.el6_3
openSUSE Tumbleweedlibxml22.9.4-1.22