Lucene search
CloudLinuxCLSA-2022:1641903536HistoryJan 11, 2022 - 12:18 p.m.
Fix of 8 CVEs
2022-01-1112:18:56
repo.cloudlinux.com
40
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.2%
- CVE-2021-3517.patch: validate UTF8 in xmlEncodeEntities
- CVE-2021-3518.patch: fix user-after-free with ‘xmllint --xinclude --dropdtd’
- CVE-2021-3537.patch: propagate error in xmlParseElementChildrenContentDeclPriv
- CVE-2021-3541.patch: parser fix for the billion laughs attack
- CVE-2021-3516.patch: fix use-after-free with ‘xmllint --html --push’
- CVE-2017-8872.patch: free input buffer in xmlHaltParser
- CVE-2019-20388.patch: fix memory leak in xmlSchemaValidateStream
- CVE-2020-24977.patch: fix out-of-bounds read with ‘xmllint --htmlout’
Related
osv
osv
libxml2 vulnerabilities
2021-06-17 14:59:21
Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12
2021-05-17 20:52:05
Moderate: libxml2 security update
2021-06-29 13:42:19
cloudlinux
cloudlinux
nessus
nessus
NewStart CGSL MAIN 6.02 : libxml2 Multiple Vulnerabilities (NS-SA-2022-0050)
2022-05-09 00:00:00
GLSA-202107-05 : libxml2: Multiple vulnerabilities
2022-01-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4991-1)
2021-06-18 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2022-1082)
2022-02-13 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2021-2406)
2021-09-15 00:00:00
cloudfoundry
cloudfoundry
USN-4991-1: libxml2 vulnerabilities | Cloud Foundry
2021-07-08 00:00:00
ubuntu
ubuntu
libxml2 vulnerabilities
2021-06-17 00:00:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2021-07-06 00:00:00
github
github
Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12
2021-05-17 20:52:05
altlinux
altlinux
Security fix for the ALT Linux 10 package libxml2 version 1:2.9.12-alt1
2021-06-15 00:00:00
Security fix for the ALT Linux 9 package libxml2 version 1:2.9.10-alt4
2020-11-09 00:00:00
Security fix for the ALT Linux 10 package libxml2 version 1:2.9.10-alt4
2020-11-06 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: libxml2-2.9.12-4.fc33
2021-06-14 01:22:50
[SECURITY] Fedora 34 Update: libxml2-2.9.10-12.fc34
2021-05-10 01:07:26
[SECURITY] Fedora 32 Update: libxml2-2.9.10-7.fc32
2020-09-16 14:44:56
redhat
redhat
(RHSA-2021:2569) Moderate: libxml2 security update
2021-06-29 13:42:19
rocky
rocky
libxml2 security update
2021-06-29 13:42:19
almalinux
almalinux
Moderate: libxml2 security update
2021-06-29 13:42:19
oraclelinux
oraclelinux
libxml2 security update
2021-07-03 00:00:00
libxml2 security update
2021-05-25 00:00:00
debian
debian
[SECURITY] [DLA 2653-1] libxml2 security update
2021-05-10 12:31:54
[SECURITY] [DLA 2369-1] libxml2 security update
2020-09-09 22:41:50
mageia
mageia
Updated libxml2 packages fix security vulnerabilities
2021-05-19 22:29:59
Updated libxml2 packages fix a security vulnerability
2021-01-04 17:42:30
suse
suse
Security update for libxml2 (important)
2021-05-22 00:00:00
Security update for libxml2 (moderate)
2021-05-09 00:00:00
Security update for libxml2 (moderate)
2020-09-19 00:00:00
amazon
amazon
Medium: libxml2
2021-07-01 01:03:00
Medium: libxml2
2021-06-16 20:37:00
Medium: libxml2
2023-04-27 16:19:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0399
2021-05-31 00:00:00
Critical Photon OS Security Update - PHSA-2021-0035
2021-06-02 00:00:00
Important Photon OS Security Update - PHSA-2021-0246
2021-06-02 00:00:00
ubuntucve
ubuntucve
ibm
ibm
freebsd
freebsd
libxml -- multiple vulnerabilities
2020-01-21 00:00:00
archlinux
archlinux
[ASA-202011-15] libxml2: multiple issues
2020-11-17 00:00:00
ics
ics
Hitachi Energy RTU500 series
2021-12-02 12:00:00
Hitachi Energy APM Edge (Update A)
2022-10-18 12:00:00
veracode
veracode
Denial Of Service (DoS)
2020-12-06 04:02:57
Denial Of Service (DoS)
2020-01-22 13:24:09
Copy-Paste Vulnerability (CPV) Through Libxml2
2017-05-16 02:21:15
debiancve
debiancve
cve
cve
prion
prion
Memory corruption
2020-01-21 23:15:00
Information disclosure
2017-05-10 05:29:00
Buffer overflow
2020-09-04 00:15:00
cbl_mariner
cbl_mariner
CVE-2019-20388 affecting package libxml2 2.9.10-4
2020-10-08 18:09:52
redhatcve
redhatcve
alpinelinux
alpinelinux
CVE-2019-20388
2020-01-21 23:15:00
CVE-2020-24977
2020-09-04 00:15:00
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.2%
Related for CLSA-2022:1641903536