Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2012:1512
HistoryNov 29, 2012 - 8:24 p.m.

libxml2 security update

2012-11-2920:24:03
CentOS Project
lists.centos.org
45

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.05 Low

EPSS

Percentile

92.7%

JSON

CentOS Errata and Security Advisory CESA-2012:1512

The libxml2 library is a development toolbox providing the implementation
of various XML standards.

A heap-based buffer underflow flaw was found in the way libxml2 decoded
certain entities. A remote attacker could provide a specially-crafted XML
file that, when opened in an application linked against libxml2, would
cause the application to crash or, potentially, execute arbitrary code with
the privileges of the user running the application. (CVE-2012-5134)

All users of libxml2 are advised to upgrade to these updated packages,
which contain a backported patch to correct this issue. The desktop must be
restarted (log out, then log back in) for this update to take effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2012-November/081180.html
https://lists.centos.org/pipermail/centos-announce/2012-November/081181.html

Affected packages:
libxml2
libxml2-devel
libxml2-python
libxml2-static

Upstream details at:
https://access.redhat.com/errata/RHSA-2012:1512

OSVersionArchitecturePackageVersionFilename
CentOS5i386libxml2<Β 2.6.26-2.1.15.el5_8.6libxml2-2.6.26-2.1.15.el5_8.6.i386.rpm
CentOS5i386libxml2-devel<Β 2.6.26-2.1.15.el5_8.6libxml2-devel-2.6.26-2.1.15.el5_8.6.i386.rpm
CentOS5i386libxml2-python<Β 2.6.26-2.1.15.el5_8.6libxml2-python-2.6.26-2.1.15.el5_8.6.i386.rpm
CentOS5i386libxml2<Β 2.6.26-2.1.15.el5_8.6libxml2-2.6.26-2.1.15.el5_8.6.i386.rpm
CentOS5x86_64libxml2<Β 2.6.26-2.1.15.el5_8.6libxml2-2.6.26-2.1.15.el5_8.6.x86_64.rpm
CentOS5i386libxml2-devel<Β 2.6.26-2.1.15.el5_8.6libxml2-devel-2.6.26-2.1.15.el5_8.6.i386.rpm
CentOS5x86_64libxml2-devel<Β 2.6.26-2.1.15.el5_8.6libxml2-devel-2.6.26-2.1.15.el5_8.6.x86_64.rpm
CentOS5x86_64libxml2-python<Β 2.6.26-2.1.15.el5_8.6libxml2-python-2.6.26-2.1.15.el5_8.6.x86_64.rpm
CentOS6i686libxml2<Β 2.7.6-8.el6_3.4libxml2-2.7.6-8.el6_3.4.i686.rpm
CentOS6i686libxml2-devel<Β 2.7.6-8.el6_3.4libxml2-devel-2.7.6-8.el6_3.4.i686.rpm
Rows per page:
1-10 of 181

Related

suse 6
vmware 2
prion 1
debian 1
ubuntu 1
openvas 44
nessus 36
veracode 1
securityvulns 7
oraclelinux 3
redhat 2
ubuntucve 1
cve 1
debiancve 1
amazon 1
osv 1
slackware 1
threatpost 2
freebsd 1
gentoo 1
chrome 1
seebug 1
centos 1
tenable 1
suse
suse
Security update for libxml2 (important)
2012-12-12 17:09:09
libxml2: fixed buffer overflow during decoding entities (important)
2013-01-23 14:07:38
libxml2: fixed buffer overflow during decoding entities (important)
2012-12-17 12:08:33
vmware
vmware
VMware ESXi and ESX security update for third party library
2013-03-28 00:00:00
VMware ESXi and ESX security update for third party library
2013-03-28 00:00:00
prion
prion
Heap overflow
2012-11-28 01:55:00
debian
debian
[SECURITY] [DSA 2580-1] libxml security update
2012-12-02 20:54:41
ubuntu
ubuntu
Libxml2 vulnerability
2012-12-06 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1656-1)
2012-12-06 00:00:00
Ubuntu Update for libxml2 USN-1656-1
2012-12-06 00:00:00
VMSA-2013-0004 VMware ESXi security update for third party library
2013-04-02 00:00:00
nessus
nessus
Oracle Linux 5 / 6 : libxml2 (ELSA-2012-1512)
2013-07-12 00:00:00
Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : libxml2 vulnerability (USN-1656-1)
2012-12-06 00:00:00
SuSE 11.2 Security Update : libxml2 (SAT Patch Number 7140)
2013-01-25 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 08:50:59
securityvulns
securityvulns
libxml2 buffer overflow
2012-12-06 00:00:00
APPLE-SA-2014-01-22-1 iTunes 11.1.4
2014-01-29 00:00:00
Apple iTunes multiple security vulnerabilities
2014-01-29 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2012-11-29 00:00:00
libxml2 security update
2013-02-28 00:00:00
mingw32-libxml2 security update
2013-01-31 00:00:00
redhat
redhat
(RHSA-2012:1512) Important: libxml2 security update
2012-11-29 00:00:00
(RHSA-2013:0217) Important: mingw32-libxml2 security update
2013-01-31 00:00:00
ubuntucve
ubuntucve
CVE-2012-5134
2012-11-27 00:00:00
cve
cve
CVE-2012-5134
2012-11-28 01:55:00
debiancve
debiancve
CVE-2012-5134
2012-11-28 01:55:00
amazon
amazon
Important: libxml2
2012-12-06 21:22:00
osv
osv
libxml2 - buffer overflow
2012-12-02 00:00:00
slackware
slackware
[slackware-security] libxml2
2012-12-07 03:51:19
threatpost
threatpost
Apple's iOS 7 Update Fixes 80 Security Bugs
2013-09-19 12:53:59
Google Repairs High-Risk Flaw in Chrome
2012-11-27 17:07:25
freebsd
freebsd
chromium -- multiple vulnerabilities
2012-11-26 00:00:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2013-11-10 00:00:00
chrome
chrome
Stable Channel Update
2012-11-26 00:00:00
seebug
seebug
Google Chrome 23.0.1271.91δΉ‹ε‰η‰ˆζœ¬ε€šδΈͺθΏœη¨‹ζΌζ΄ž
2012-11-27 00:00:00
centos
centos
mingw32 security update
2013-02-01 00:53:30
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.05 Low

EPSS

Percentile

92.7%

JSON
Related for CESA-2012:1512
suse6vmware2prion1debian1ubuntu1openvas44nessus36veracode1securityvulns7oraclelinux3redhat2ubuntucve1cve1debiancve1amazon1osv1slackware1threatpost2freebsd1gentoo1chrome1seebug1centos1tenable1