Xmlstarlet vulnerabilities
3 vulnerabilities
Known vulnerabilities in Xmlstarlet products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Command Line Xml Toolkit3 vulnerabilities
CVE-2004-2159debianxmlstarlet+1
EPSS score1.96%
Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c.CVE-2004-2160debianxmlstarlet+1EPSS score1.70%
Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code.CVE-2004-0989debianlibxml+11EPSS score21.69%
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.