Lucene search
AlmaLinuxALSA-2023:4349HistoryAug 01, 2023 - 12:00 a.m.
Moderate: libxml2 security update
2023-08-0100:00:00
errata.almalinux.org
66
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
41.1%
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)
- libxml2: Hashing of empty dict strings isn’t deterministic (CVE-2023-29469)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | i686 | libxml2-devel | < 2.9.13-3.el9_2.1 | libxml2-devel-2.9.13-3.el9_2.1.i686.rpm |
| almalinux | 9 | ppc64le | libxml2-devel | < 2.9.13-3.el9_2.1 | libxml2-devel-2.9.13-3.el9_2.1.ppc64le.rpm |
| almalinux | 9 | aarch64 | libxml2-devel | < 2.9.13-3.el9_2.1 | libxml2-devel-2.9.13-3.el9_2.1.aarch64.rpm |
| almalinux | 9 | x86_64 | libxml2-devel | < 2.9.13-3.el9_2.1 | libxml2-devel-2.9.13-3.el9_2.1.x86_64.rpm |
| almalinux | 9 | s390x | libxml2-devel | < 2.9.13-3.el9_2.1 | libxml2-devel-2.9.13-3.el9_2.1.s390x.rpm |
| almalinux | 9 | i686 | libxml2 | < 2.9.13-3.el9_2.1 | libxml2-2.9.13-3.el9_2.1.i686.rpm |
| almalinux | 9 | s390x | libxml2 | < 2.9.13-3.el9_2.1 | libxml2-2.9.13-3.el9_2.1.s390x.rpm |
| almalinux | 9 | s390x | python3-libxml2 | < 2.9.13-3.el9_2.1 | python3-libxml2-2.9.13-3.el9_2.1.s390x.rpm |
| almalinux | 9 | x86_64 | python3-libxml2 | < 2.9.13-3.el9_2.1 | python3-libxml2-2.9.13-3.el9_2.1.x86_64.rpm |
| almalinux | 9 | x86_64 | libxml2 | < 2.9.13-3.el9_2.1 | libxml2-2.9.13-3.el9_2.1.x86_64.rpm |
Related
nessus
nessus
AIX 7.3 TL 1 : libxml2 (IJ47630)
2023-07-26 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libxml2 (SUSE-SU-2023:2053-1)
2023-04-28 00:00:00
AlmaLinux 8 : libxml2 (ALSA-2023:4529)
2023-08-09 00:00:00
aix
aix
AIX is vulnerable to a denial of service due to libxml2
2023-07-25 11:08:32
openvas
openvas
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2563)
2023-08-03 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2514)
2023-08-01 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2194)
2023-06-09 00:00:00
ubuntu
ubuntu
libxml2 vulnerabilities
2023-04-19 00:00:00
libxml2 vulnerabilities
2023-06-07 00:00:00
redos
redos
ROS-20230616-04
2023-06-16 00:00:00
rocky
rocky
libxml2 security update
2023-10-06 23:10:01
osv
osv
libxml2 - security update
2023-04-30 00:00:00
libxml2 vulnerabilities
2023-04-19 13:42:53
Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs
2023-04-11 21:48:01
redhat
redhat
(RHSA-2023:4529) Moderate: libxml2 security update
2023-08-08 07:21:37
(RHSA-2023:4349) Moderate: libxml2 security update
2023-08-01 07:58:11
(RHSA-2024:0413) Moderate: libxml2 security update
2024-01-24 14:40:23
fedora
fedora
[SECURITY] Fedora 38 Update: libxml2-2.10.4-1.fc38
2023-04-18 01:40:06
[SECURITY] Fedora 37 Update: libxml2-2.10.4-1.fc37
2023-04-18 01:32:12
ibm
ibm
Security Bulletin: AIX is vulnerable to a denial of service due to libxml2 (CVE-2023-29469 and CVE-2023-28484)
2023-10-11 19:02:33
Security Bulletin: Vulnerabilities in libxml2 library (CVE-2023-28484, CVE-2023-29469) affect Power HMC.
2024-04-16 17:05:35
Security Bulletin: CVE-2023-29469 may affect IBM CICS TX Advanced 10.1
2023-06-08 18:25:41
oraclelinux
oraclelinux
libxml2 security update
2023-08-10 00:00:00
libxml2 security update
2023-08-02 00:00:00
github
github
Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs
2023-04-11 21:48:01
rosalinux
rosalinux
Advisory ROSA-SA-2024-2321
2024-01-09 09:53:22
Advisory ROSA-SA-2023-2319
2023-12-26 12:04:20
cloudfoundry
cloudfoundry
USN-6028-1: libxml2 vulnerabilities | Cloud Foundry
2023-04-29 00:00:00
freebsd
freebsd
libxml2 -- multiple vulnerabilities
2023-04-11 00:00:00
electron -- vulnerability
2023-05-17 00:00:00
debian
debian
[SECURITY] [DSA 5391-1] libxml2 security update
2023-04-20 20:46:15
[SECURITY] [DLA 3405-1] libxml2 security update
2023-04-30 11:30:47
amazon
amazon
Medium: libxml2
2023-04-27 18:36:00
Medium: libxml2
2023-04-27 16:19:00
almalinux
almalinux
Moderate: libxml2 security update
2023-08-08 00:00:00
mageia
mageia
Updated libxml2 packages fix security vulnerability
2023-05-06 21:19:07
photon
photon
Moderate Photon OS Security Update - PHSA-2023-3.0-0569
2023-04-23 00:00:00
Moderate Photon OS Security Update - PHSA-2023-5.0-0001
2023-05-02 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0380
2023-04-25 00:00:00
slackware
slackware
[slackware-security] libxml2
2023-12-10 01:15:09
gentoo
gentoo
libxml2: Multiple Vulnerabilities
2024-02-09 00:00:00
alpinelinux
alpinelinux
CVE-2023-28484
2023-04-24 21:15:09
CVE-2023-29469
2023-04-24 21:15:09
prion
prion
Null pointer dereference
2023-04-24 21:15:00
Double free
2023-04-24 21:15:00
cbl_mariner
cbl_mariner
CVE-2023-29469 affecting package libxml2 for versions less than 2.10.4-1
2023-08-03 02:51:21
CVE-2023-28484 affecting package libxml2 for versions less than 2.10.4-1
2023-08-03 02:51:21
debiancve
debiancve
CVE-2023-29469
2023-04-24 21:15:09
CVE-2023-28484
2023-04-24 21:15:09
redhatcve
redhatcve
CVE-2023-29469
2023-04-11 19:29:50
CVE-2023-28484
2023-04-11 19:29:40
ubuntucve
ubuntucve
CVE-2023-29469
2023-04-12 00:00:00
CVE-2023-28484
2023-04-12 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-04-25 08:12:01
Double Free
2023-04-20 04:30:38
cve
cve
CVE-2023-28484
2023-04-24 21:15:09
CVE-2023-29469
2023-04-24 21:15:09
ics
ics
Siemens Telecontrol Server Basic
2024-04-11 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
apple
apple
About the security content of iOS 16.5 and iPadOS 16.5
2023-05-18 00:00:00
About the security content of macOS Ventura 13.4
2023-05-18 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
41.1%
Related for ALSA-2023:4349