Lucene search

K
freebsdFreeBSD843A4641-9816-11E2-9C51-080027019BE0
HistoryFeb 21, 2013 - 12:00 a.m.

libxml2 -- cpu consumption Dos

2013-02-2100:00:00
vuxml.freebsd.org
12

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.2%

Kurt Seifried reports:

libxml2 is affected by the expansion of internal entities
(which can be used to consume resources) and external entities
(which can cause a denial of service against other services,
be used to port scan, etc.)…

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibxml2< 2.8.0UNKNOWN

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.2%