CVE-2013-2877
Fixed in a distro release EPSS 5%
parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.
Products: google chrome, xmlsoft libxml2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxml2 | 2.9.1+dfsg1-1 |
| Debian 13 | libxml2 | 2.9.1+dfsg1-1 |
| Debian 14 | libxml2 | 2.9.1+dfsg1-1 |
| Debian 6.0 | libxml2 | 2.7.8.dfsg-2+squeeze8 |
| Debian 7 | chromium-browser | 28.0.1500.71-1~deb7u1 |
| Debian 7 | libxml2 | 2.8.0+dfsg1-7+nmu2 |
| Red Hat Enterprise Linux 6 | libxml2 | 0:2.7.6-14.el6_5.1 |
| Red Hat Enterprise Linux 6 | libxml2-debuginfo | 0:2.7.6-14.el6_5.1 |
| Red Hat Enterprise Linux 6 | libxml2-devel | 0:2.7.6-14.el6_5.1 |
| Red Hat Enterprise Linux 6 | libxml2-python | 0:2.7.6-14.el6_5.1 |
| Red Hat Enterprise Linux 6 | libxml2-static | 0:2.7.6-14.el6_5.1 |
| openSUSE Tumbleweed | ruby3.2-rubygem-nokogiri | 1.13.9-1.7 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.13.3-1.1 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.15.5-1.5 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.18.2-1.1 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.18.9-1.4 |
| openSUSE Tumbleweed | rubygem-nokogiri | 1.6.8.1-1.3 |