Vulnerability Through C Libraries

chef uses vulnerable versions of LibXML2, OpenSSL and LibXSLT. These vulnerabilities are included due to the omnibusoverride file using the vulnerable versions. LibXML2 is vulnerable to the following CVEs: CVE-2017-9050, CVE-2017-9049, CVE-2017-9048, CVE-2017-9047, CVE-2017-8872, and CVE-2016-931...

CVE-2014-8872

Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with firmware 5.50...

CVE-2014-8872

Summary: CVE-2014-8872 covers an improper verification of cryptographic signatures in AVM FRITZ!Box firmware images. Affected products (examples): FRITZ!Box 6810 LTE (firmware 5.22+), FRITZ!Box 6840 LTE (firmware 5.23+), and other models with firmware 5.50. Root cause (as described): The firmware...

openSUSE Security Update : libxml2 (openSUSE-2017-942)

This update for libxml2 fixes the following security issue : - CVE-2017-8872: Out-of-bounds read in htmlParseTryOrFinish. bsc1038444 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:2141-1)

This update for libxml2 fixes the following issues: Security issues fixed : - CVE-2017-8872: Out-of-bounds read in htmlParseTryOrFinish. bsc1038444 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2017:2141-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issues fixed: - CVE-2017-8872: Out-of-bounds read in htmlParseTryOrFinish. bsc1038444...

SUSE SLES11 Security Update : libxml2 (SUSE-SU-2017:2115-1)

This update for libxml2 fixes the following issues : - CVE-2017-8872: Out-of-bounds read could lead to application crash bsc1038444 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE-SU-2017:2115-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2017-8872: Out-of-bounds read could lead to application crash bsc1038444...

Copy-Paste Vulnerability (CPV) Through Libxml2

nokogiri has a copied version of the libxml2 library. The copy that nokogiri includes is vulnerable to CVE-2017-8872 which allows attackers to cause a denial of service DoS or information disclosure via a buffer overflow. This is caused by the htmlParseTryOrFinish method in the HTMLparser.c file...

CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...

CVE-2017-8872

CVE-2017-8872 affects libxml2 and is a buffer-over-read/overflow in htmlParseTryOrFinish() in HTMLparser.c. It can allow a local attacker to cause a denial of service or information disclosure. Affected context appears in multiple IBM security bulletins for libxml2-enabled devices (e.g., IBM Blad...

CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...

SUSE SLED12 / SLES12 Security Update : dosfstools (SUSE-SU-2016:2145-1)

dosfstools was updated to fix two security issues. These security issues were fixed : - CVE-2015-8872: The setfat function in fat.c in dosfstools might have allowed attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of...

SUSE SLES11 Security Update : dosfstools (SUSE-SU-2016:2146-1)

dosfstools was updated to fix two security issues. These security issues were fixed : - CVE-2015-8872: The setfat function in fat.c in dosfstools might have allowed attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of...

Fedora 23 : dosfstools (2016-e2d635cbf8)

This is an update fixing off-by-2 error leading to corruption in FAT12 CVE-2015-8872 and heap-buffer-overflows in readfat and getfat functions CVE-2016-4804. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable ha...

CVE-2015-8872

The setfat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."...

CVE-2015-8872

The setfat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."...

CVE-2015-8872

CVE-2015-8872 affects dosfstools: the set_fat function in fat.c can trigger an off-by-two error on FAT12 filesystems when writing an odd number of clusters to the third-to-last entry, potentially causing an invalid memory read and a crash (DoS). Affected is dosfstools prior to 4.0; multiple post-...

CVE-2015-8872

The setfat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."...

CVE-2015-8872

The setfat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."...