xmill vulnerabilities and fixes

Recent CVEs affecting xmill, with upgrade or downgrade steps. 13 tracked.

xmill has 13 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-04-14. Highest priority: CVE-2021-21829 (score 66/100).

• CVE-2022-26507 CRITICAL 9.8 DOWNGRADE UPGRADE A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7
• CVE-2021-21830 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT
• CVE-2021-21829 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::Uncompress
• CVE-2021-21828 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT
• CVE-2021-21827 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT
• CVE-2021-21826 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT
• CVE-2021-21825 CRITICAL 9.8 DOWNGRADE A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressIt
• CVE-2021-21815 HIGH 7.8 DOWNGRADE A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of
• CVE-2021-21814 HIGH 7.8 DOWNGRADE Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from
• CVE-2021-21813 HIGH 7.8 DOWNGRADE Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from
• CVE-2021-21812 HIGH 7.8 DOWNGRADE A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of
• CVE-2021-21811 CRITICAL 9.8 DOWNGRADE A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xm
• CVE-2021-21810 CRITICAL 9.8 DOWNGRADE A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7

FAQ

How do I fix xmill vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is xmill being exploited right now?

None of the tracked xmill CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which xmill CVE should I patch first?

CVE-2021-21829 currently ranks highest (66/100): A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::Uncompress.

RSS feed for xmill · ← Back to latest CVEs