Design/Logic Flaw

🗓️ 19 Feb 2018 19:29:00Reported by PRIOn knowledge baseType

A flaw in libXML2 allows remote XML entity inclusion with default parser flags, exposing higher-risk attack surface and content from local/remote servers

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server 2017Q4 Security Updater: IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.	15 Jun 201823:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libxml2 affects IBM Cognos Analytics	15 Jun 201823:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2017-7376, CVE-2017-7375, CVE-2017-5969, CVE-2017-0663)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Libxml2 affect IBM Cognos Metrics Manager.	15 Jun 201823:49	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Systems Tester is affected by Libxml2 vulnerabilities CVE-2016-9318, CVE-2017-5969, CVE-2017-7375 and CVE-2017-8872	17 Jun 201805:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM RackSwitch Products	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM Virtual Fabric 10Gb Switch Module for IBM BladeCenter	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Streams may be affected by XMLsoft Libxml2 vulnerabilities	16 Jun 201814:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to CVE-2017-0663 and loss of confidentiality due to CVE-2017-7375	3 Nov 202217:22	–	ibm

Source	Link
source	www.source.android.com/security/bulletin/2017-06-01
git	www.git.gnome.org/browse/libxml2/commit/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
android	www.android.googlesource.com/platform/external/libxml2/+/308396a55280f69ad4112d4f9892f4cbeff042aa
debian	www.debian.org/security/2017/dsa-3952
security	www.security.gentoo.org/glsa/201711-01
securitytracker	www.securitytracker.com/id/1038623
securityfocus	www.securityfocus.com/bid/98877

18 Mar 2018 14:17Current

8.9High risk

Vulners AI Score8.9

EPSS0.00443