← Back

CVE-2019-20388

nvd nist
Published: Jan 21, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

Affected (29)

Show all products
Xmlsoft: Libxml2 · Debian: Debian Linux · Netapp: Cloud Backup, Clustered Data Ontap, Ontap Select Deploy Administration Utility, Plug In For Symantec Netbackup, Smi S Provider, Snapdrive, Steelstore Cloud Integrated Storage, H300s Firmware, H500s Firmware, H700s Firmware, H300e Firmware, H500e Firmware, H700e Firmware, H410s Firmware · Oracle: Communications Cloud Native Core Network Function Cloud Native Environment, Enterprise Manager Base Platform, Enterprise Manager Ops Center, Mysql Workbench, Peoplesoft Enterprise Peopletools, Real User Experience Insight · Opensuse: Leap · Fedoraproject: Fedora
Xmlsoft
1 product
Libxml2
Debian
1 product
Debian Linux
Netapp
14 products
Cloud Backup
Clustered Data Ontap
Ontap Select Deploy Administration Utility
Plug In For Symantec Netbackup
Smi S Provider
Snapdrive
Steelstore Cloud Integrated Storage
H300s Firmware
H500s Firmware
H700s Firmware
H300e Firmware
H500e Firmware
H700e Firmware
H410s Firmware
Oracle
6 products
Communications Cloud Native Core Network Function Cloud Native Environment
Enterprise Manager Base Platform
Enterprise Manager Ops Center
Mysql Workbench
Peoplesoft Enterprise Peopletools
Real User Experience Insight
Opensuse
1 product
Leap
Fedoraproject
1 product
Fedora
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Libxml2
Version 2.9.10
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration C
7 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Clustered Data Ontap
All versions
Ontap Select Deploy Administration Utility
All versions
Plug In For Symantec Netbackup
All versions
Smi S Provider
All versions
Snapdrive
All versions
Steelstore Cloud Integrated Storage
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300s Firmware
All versions
Running on/withPlatform Versions
Netapp
H300s
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500s Firmware
All versions
Running on/withPlatform Versions
Netapp
H500s
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700s Firmware
All versions
Running on/withPlatform Versions
Netapp
H700s
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300e Firmware
All versions
Running on/withPlatform Versions
Netapp
H300e
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500e Firmware
All versions
Running on/withPlatform Versions
Netapp
H500e
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700e Firmware
All versions
Running on/withPlatform Versions
Netapp
H700e
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410s Firmware
All versions
Running on/withPlatform Versions
Netapp
H410s
All versions
Configuration K
9 vulnerable
Vulnerable SoftwareAffected Versions
Communications Cloud Native Core Network Function Cloud Native Environment
Version 1.10.0
Oracle
Enterprise Manager Base Platform
Version 13.4.0.0
Enterprise Manager Base Platform
Version 13.5.0.0
Enterprise Manager Ops Center
Version 12.4.0.0
Mysql Workbench
Up to 8.0.26
Peoplesoft Enterprise Peopletools
Version 8.58
Oracle
Real User Experience Insight
Version 13.3.1.0
Real User Experience Insight
Version 13.4.1.0
Real User Experience Insight
Version 13.5.1.0
Configuration L
1 vulnerable
Vulnerable SoftwareAffected Versions
Leap
Version 15.1
Configuration M
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 30
Fedora
Version 31
Fedora
Version 32

Related CWEs

CWE-401
Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (24)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.