python-libxml2-python (SUSE:Linux Enterprise Server 15 SP2-BCL) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 15 SP2-BCL package python-libxml2-python, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2022-40304 — CVSS 7.8 (high): An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading…
• CVE-2022-23308 — CVSS 7.5 (high): valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
• CVE-2022-40303 — CVSS 7.5 (high): An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled…
• CVE-2022-29824 — CVSS 6.5 (medium): In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows…
• CVE-2016-3709 — CVSS 6.1 (medium): Possible cross-site scripting vulnerability in libxml after commit 960f0e2.