Lucene search
DebianDEBIAN:DLA-0016-1:08E9FHistoryJul 19, 2014 - 3:07 p.m.
[DLA-0016-1] libxml2 security update
2014-07-1915:07:28
lists.debian.org
15
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
7.3
Confidence
High
EPSS
0.024
Percentile
90.1%
Package : libxml2
Version : 2.7.8.dfsg-2+squeeze9
CVE ID : CVE-2014-0191
Debian Bug : #747309
Daniel P. Berrange discovered a denial of service vulnerability in
libxml2 entity substitution.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 7 | powerpc | libxml2-dbg | < 2.8.0+dfsg1-7+wheezy3 | libxml2-dbg_2.8.0+dfsg1-7+wheezy3_powerpc.deb |
| Debian | 7 | ia64 | libxml2-utils-dbg | < 2.8.0+dfsg1-7+wheezy3 | libxml2-utils-dbg_2.8.0+dfsg1-7+wheezy3_ia64.deb |
| Debian | 7 | amd64 | libxml2 | < 2.8.0+dfsg1-7+wheezy3 | libxml2_2.8.0+dfsg1-7+wheezy3_amd64.deb |
| Debian | 6 | all | libxml2 | < 2.7.8.dfsg-2+squeeze | libxml2_2.7.8.dfsg-2+squeeze_all.deb |
| Debian | 7 | s390x | libxml2-dbg | < 2.8.0+dfsg1-7+wheezy3 | libxml2-dbg_2.8.0+dfsg1-7+wheezy3_s390x.deb |
| Debian | 6 | i386 | libxml2-utils | < 2.7.8.dfsg-2+squeeze11 | libxml2-utils_2.7.8.dfsg-2+squeeze11_i386.deb |
| Debian | 7 | mipsel | libxml2-utils-dbg | < 2.8.0+dfsg1-7+wheezy3 | libxml2-utils-dbg_2.8.0+dfsg1-7+wheezy3_mipsel.deb |
| Debian | 7 | kfreebsd-i386 | libxml2-utils-dbg | < 2.8.0+dfsg1-7+wheezy3 | libxml2-utils-dbg_2.8.0+dfsg1-7+wheezy3_kfreebsd-i386.deb |
| Debian | 7 | armhf | libxml2-utils-dbg | < 2.8.0+dfsg1-7+wheezy3 | libxml2-utils-dbg_2.8.0+dfsg1-7+wheezy3_armhf.deb |
| Debian | 7 | kfreebsd-amd64 | libxml2 | < 2.8.0+dfsg1-7+wheezy3 | libxml2_2.8.0+dfsg1-7+wheezy3_kfreebsd-amd64.deb |
Related
freebsd
freebsd
libxml2 -- entity substitution DoS
2013-12-03 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-341)
2015-09-08 00:00:00
Fedora Update for mingw-libxml2 FEDORA-2014-17609
2015-01-05 00:00:00
Fedora Update for mingw-libxml2 FEDORA-2014-17573
2015-01-05 00:00:00
nessus
nessus
AIX 6.1 TL 9 : bos.rte.control (U861276)
2014-11-10 00:00:00
GLSA-201409-08 : libxml2: Denial of Service
2014-09-22 00:00:00
redhat
redhat
(RHSA-2015:0749) Moderate: libxml2 security update
2015-03-30 00:00:00
(RHSA-2014:0513) Moderate: libxml2 security update
2014-05-19 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-libxml2-2.9.2-1.fc21
2015-01-02 05:01:30
[SECURITY] Fedora 20 Update: mingw-libxml2-2.9.2-1.fc20
2015-01-02 05:01:49
[SECURITY] Fedora 21 Update: libxml2-2.9.1-7.fc21
2015-04-07 07:30:19
ibm
ibm
debian
debian
libxml2 security update
2014-07-19 14:43:46
[SECURITY] [DSA 2978-1] libxml2 security update
2014-07-11 14:29:53
libxml2 security update
2014-07-19 14:46:40
veracode
veracode
XML External Entities (XXE)
2018-08-06 02:11:43
centos
centos
libxml2 security update
2015-04-01 03:26:34
libxml2 security update
2014-05-19 13:08:11
debiancve
debiancve
CVE-2014-0191
2015-01-21 14:59:00
mageia
mageia
Updated libxml2 packages fix CVE-2014-0191
2014-05-10 23:46:24
Updated kdelibs4 packages fix security vulnerability and various bugs
2014-08-12 13:16:46
prion
prion
Design/Logic Flaw
2015-01-21 14:59:00
Design/Logic Flaw
2015-01-21 18:59:00
ubuntucve
ubuntucve
CVE-2014-0191
2014-05-07 00:00:00
securityvulns
securityvulns
libxml2 DoS
2014-05-07 00:00:00
NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities
2014-12-11 00:00:00
APPLE-SA-2015-08-13-3 iOS 8.4.1
2015-08-17 00:00:00
ubuntu
ubuntu
libxml2 vulnerability
2014-05-15 00:00:00
nvd
nvd
cve
cve
gentoo
gentoo
libxml2: Denial of service
2014-09-19 00:00:00
cvelist
cvelist
CVE-2014-0191
2015-01-21 02:00:00
CVE-2015-0386
2015-01-21 18:00:00
aix
aix
AIX libxml2 vulnerability,VIOS libxml2 vulnerability
2014-08-15 10:26:30
amazon
amazon
Medium: libxml2
2014-05-21 10:31:00
oraclelinux
oraclelinux
libxml2 security update
2014-05-19 00:00:00
libxml2 security update
2015-03-30 00:00:00
libxml2 security update
2015-12-07 00:00:00
osv
osv
libxml2 - security update
2015-02-07 00:00:00
libxml2 - security update
2014-07-11 00:00:00
ruby2.2-rubygem-nokogiri-1.6.8.1-1.3 on GA media
2024-06-15 00:00:00
archlinux
archlinux
libxml2: Denial of service
2014-10-24 00:00:00
exploitpack
exploitpack
eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection
2015-10-30 00:00:00
exploitdb
exploitdb
eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection
2015-10-30 00:00:00
vmware
vmware
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
apple
apple
About the security content of Apple TV 7.2.1 - Apple Support
2017-01-23 03:54:31
About the security content of Apple TV 7.2.1
2016-02-25 00:00:00
suse
suse
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
7.3
Confidence
High
EPSS
0.024
Percentile
90.1%
Related for DEBIAN:DLA-0016-1:08E9F