CVE-2019-20388

HIGH

Xmlsoft Libxml2 < 8.0.26 - Memory Leak

Title source: rule

Description

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

References (12)

Scores

CVSS v3 7.5
EPSS 0.0056
EPSS Percentile 68.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-401
Status published

Affected Products (29)

xmlsoft/libxml2
debian/debian_linux
netapp/cloud_backup
netapp/clustered_data_ontap
netapp/ontap_select_deploy_administration_utility
netapp/plug-in_for_symantec_netbackup
netapp/smi-s_provider
netapp/snapdrive
netapp/steelstore_cloud_integrated_storage
netapp/h300s_firmware
netapp/h500s_firmware
netapp/h700s_firmware
netapp/h300e_firmware
netapp/h500e_firmware
netapp/h700e_firmware
... and 14 more

Timeline

Published Jan 21, 2020
Tracked Since Feb 18, 2026