Denial of Service

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

1. libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service (memory consu…CVE-2008-4409Xmlsoft · 8.5% likely

   CWE-399

2. xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.CVE-2020-7595Xmlsoft · CVSS 7.5 · 7.8% likely

   CWE-835

3. The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite rec…CVE-2016-3627Xmlsoft · CVSS 7.5 · 7.0% likely

   CWE-674

4. parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.CVE-2017-16932Xmlsoft · CVSS 7.5 · 6.5% likely

   CWE-8351 bounty report

5. The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.CVE-2015-1819Xmlsoft · 6.3% likely

   CWE-399

6. xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.CVE-2019-19956Xmlsoft · CVSS 7.5 · 5.6% likely

   CWE-772

7. The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial…CVE-2015-5312Xmlsoft · 4.5% likely

   CWE-399

8. libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrat…CVE-2018-14567Xmlsoft · 4.3% likely

   CWE-835

9. Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitra…CVE-2008-4226Xmlsoft · 4.1% likely

   CWE-399

10. Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly exec…CVE-2013-1969Xmlsoft · 3.8% likely

    CWE-399

11. The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang…CVE-2015-8035Xmlsoft · 3.3% likely

    CWE-399

12. libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of ser…CVE-2012-0841Xmlsoft · 3.3% likely

    CWE-399

13. xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Xmlsoft · CVSS 7.5 · 3.2% likely

    CWE-401

14. The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder func…CVE-2017-18258Xmlsoft · 2.7% likely

    CWE-770

15. libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service…CVE-2008-3281Xmlsoft · 2.5% likely

    CWE-776

16. The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that trigge…CVE-2018-9251Xmlsoft · 2.4% likely

    CWE-835

17. A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.CVE-2021-3541Xmlsoft · 2.1% likely

    CWE-776

18. libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU c…CVE-2003-1564Xmlsoft · 1.6% likely

    CWE-776

19. libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML do…CVE-2016-9596Xmlsoft · 1.1% likely

    CWE-400

20. libxml2 xmlcatalog xmlParseSGMLCatalog recursionCVE-2025-8732Xmlsoft · CVSS 3.3 · 0.3% likely

    CWE-674

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.