Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:7715
HistoryNov 08, 2022 - 6:26 a.m.

(RHSA-2022:7715) Moderate: libxml2 security update

2022-11-0806:26:57
access.redhat.com
11

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

33.0%

JSON

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Incorrect server side include parsing can lead to XSS (CVE-2016-3709)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8aarch64python3-libxml2-debuginfo< 2.9.7-15.el8python3-libxml2-debuginfo-2.9.7-15.el8.aarch64.rpm
RedHat8s390xlibxml2-debugsource< 2.9.7-15.el8libxml2-debugsource-2.9.7-15.el8.s390x.rpm
RedHat8aarch64python3-libxml2< 2.9.7-15.el8python3-libxml2-2.9.7-15.el8.aarch64.rpm
RedHat8aarch64libxml2< 2.9.7-15.el8libxml2-2.9.7-15.el8.aarch64.rpm
RedHat8aarch64libxml2-debuginfo< 2.9.7-15.el8libxml2-debuginfo-2.9.7-15.el8.aarch64.rpm
RedHat8i686python3-libxml2-debuginfo< 2.9.7-15.el8python3-libxml2-debuginfo-2.9.7-15.el8.i686.rpm
RedHat8s390xpython3-libxml2< 2.9.7-15.el8python3-libxml2-2.9.7-15.el8.s390x.rpm
RedHat8s390xpython3-libxml2-debuginfo< 2.9.7-15.el8python3-libxml2-debuginfo-2.9.7-15.el8.s390x.rpm
RedHat8ppc64lepython3-libxml2-debuginfo< 2.9.7-15.el8python3-libxml2-debuginfo-2.9.7-15.el8.ppc64le.rpm
RedHat8x86_64python3-libxml2< 2.9.7-15.el8python3-libxml2-2.9.7-15.el8.x86_64.rpm
Rows per page:
1-10 of 291

Related

nessus 14
prion 1
osv 4
rocky 1
openvas 8
cbl_mariner 2
almalinux 1
oraclelinux 1
redhat 22
alpinelinux 1
ubuntu 1
ibm 10
veracode 1
redhatcve 1
ubuntucve 1
cloudfoundry 1
cve 1
mageia 1
debiancve 1
suse 1
rosalinux 1
tenable 1
ics 1
avleonov 1
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : libxml2 vulnerability (USN-5548-1)
2022-08-05 00:00:00
RHEL 8 : libxml2 (RHSA-2023:4767)
2023-08-28 00:00:00
RHEL 8 : libxml2 (RHSA-2022:7715)
2022-11-09 00:00:00
prion
prion
Cross site scripting
2022-07-28 17:15:00
osv
osv
Moderate: libxml2 security update
2022-11-08 06:26:57
Moderate: libxml2 security update
2022-11-08 00:00:00
libxml2 vulnerability
2022-08-04 17:40:39
rocky
rocky
libxml2 security update
2022-11-08 06:26:57
openvas
openvas
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2022-2471)
2022-10-10 00:00:00
Mageia: Security Advisory (MGASA-2022-0290)
2022-08-22 00:00:00
Ubuntu: Security Advisory (USN-5548-1)
2022-08-05 00:00:00
cbl_mariner
cbl_mariner
CVE-2016-3709 affecting package libxml2 2.9.14-3
2024-04-29 09:06:13
CVE-2016-3709 affecting package libxml2 2.10.3-1
2023-08-03 02:51:21
almalinux
almalinux
Moderate: libxml2 security update
2022-11-08 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2022-11-15 00:00:00
redhat
redhat
(RHSA-2023:4767) Moderate: libxml2 security update
2023-08-28 12:29:05
(RHSA-2023:5001) Moderate: OpenShift Container Platform 4.11.49 bug fix and security update
2023-09-13 05:13:22
(RHSA-2023:5103) Moderate: OpenShift Virtualization 4.11.6 security and bug fix update
2023-09-12 13:04:52
alpinelinux
alpinelinux
CVE-2016-3709
2022-07-28 17:15:00
ubuntu
ubuntu
libxml2 vulnerability
2022-08-04 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to cross-site scripting in GNOME libxml2 (CVE-2016-3709)
2023-03-31 16:37:56
Security Bulletin: Multiple Vulnerabilities in base image packages affect IBM Voice Gateway
2022-12-15 17:59:22
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulnerabilities in Python
2023-07-11 13:33:48
veracode
veracode
Cross-site Scripting (XSS)
2022-07-29 04:44:53
redhatcve
redhatcve
CVE-2016-3709
2022-08-01 05:39:39
ubuntucve
ubuntucve
CVE-2016-3709
2022-07-28 00:00:00
cloudfoundry
cloudfoundry
USN-5548-1: libxml2 vulnerability | Cloud Foundry
2022-08-25 00:00:00
cve
cve
CVE-2016-3709
2022-07-28 17:15:00
mageia
mageia
Updated libxml2 packages fix security vulnerability
2022-08-20 13:04:13
debiancve
debiancve
CVE-2016-3709
2022-07-28 17:15:00
suse
suse
Security update for libxml2 (important)
2022-11-04 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2356
2024-02-20 10:05:34
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

33.0%

JSON
Related for RHSA-2022:7715
nessus14prion1osv4rocky1openvas8cbl_mariner2almalinux1oraclelinux1redhat22alpinelinux1ubuntu1ibm10veracode1redhatcve1ubuntucve1cloudfoundry1cve1mageia1debiancve1suse1rosalinux1tenable1ics1avleonov1