SUSE SLES11 Security Update : libxml2 (SUSE-SU-2017:1813-1)

This update for libxml2 fixes the following issues: Security issues fixed : - CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID bsc1044337 - CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent bsc1024989 - CVE-2017-7375: Prevented an unwanted external entity reference...

SUSE-SU-2017:1813-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issues fixed: CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID bsc1044337 CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent bsc1024989 CVE-2017-7375: Prevented an unwanted external entity reference bsc1044894...

openSUSE Security Update : libxml2 (openSUSE-2017-793)

This update for libxml2 fixes the following issues : Security issues fixed : - CVE-2017-7376: Increase buffer space for port in HTTP redirect support bsc1044887 - CVE-2017-7375: Prevent unwanted external entity reference bsc1044894 This update was imported from the SUSE:SLE-12-SP2:Update update...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:1743-1)

This update for libxml2 fixes the following issues: Security issues fixed : - CVE-2017-7376: Increase buffer space for port in HTTP redirect support bsc1044887 - CVE-2017-7375: Prevent unwanted external entity reference bsc1044894, Note that Tenable Network Security has extracted the preceding...

Debian DLA-1008-1 : libxml2 security update

CVE-2017-7375 Missing validation for external entities in xmlParsePEReference CVE-2017-9047 CVE-2017-9048 A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into ...

openSUSE Security Update : libxml2 (openSUSE-2017-754)

This update for libxml2 fixes the following issues : Security issues fixed : - CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID bsc1044337 - CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent bsc1024989 This update was imported from the SUSE:SLE-12-SP2:Update update project...

[SECURITY] [DLA 1008-1] libxml2 security update

Package : libxml2 Version : 2.8.0+dfsg1-7+wheezy8 CVE ID : CVE-2017-7375 CVE-2017-9047 CVE-2017-9048 CVE-2017-9049 CVE-2017-9050 CVE-2017-7375 Missing validation for external entities in xmlParsePEReference CVE-2017-9047 CVE-2017-9048 A buffer overflow was discovered in libxml2...

DLA-1008-1 libxml2 - security update

Bulletin has no description...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:1670-1)

This update for libxml2 fixes the following issues: Security issues fixed : - CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID bsc1044337 - CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent bsc1024989 Note that Tenable Network Security has extracted the preceding descripti...

SUSE-SU-2017:1670-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issues fixed: CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID bsc1044337 CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent bsc1024989...

CVE-2017-7375

A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes. Depending on the context, this may expose a higher-risk attack surface in libxml2 not...

UBUNTU-CVE-2017-7375

A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes. Depending on the context, this may expose a higher-risk attack surface in libxml2 not...

UBUNTU-CVE-2017-7376

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects...

CVE-2017-7376

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects...

openSUSE Security Update : libxml2 (openSUSE-2017-711)

This update for libxml2 fixes the following security issues : - CVE-2017-9050: A heap-based buffer over-read in xmlDictAddString bsc1039069, bsc1039661 - CVE-2017-9049: A heap-based buffer overflow in xmlDictComputeFastKey bsc1039066 - CVE-2017-9048: A stack overflow vulnerability in...

SUSE SLES12 Security Update : libxml2 (SUSE-SU-2017:1587-1)

This update for libxml2 fixes the following issues : - CVE-2017-9050: heap-based buffer overflow xmlDictAddString func bsc1039069, bsc1039661 - CVE-2017-9049: heap-based buffer overflow xmlDictComputeFastKey func bsc1039066 - CVE-2017-9048: stack overflow vulnerability xmlSnprintfElementContent...

SUSE-SU-2017:1587-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2017-9050: heap-based buffer overflow xmlDictAddString func bsc1039069, bsc1039661 - CVE-2017-9049: heap-based buffer overflow xmlDictComputeFastKey func bsc1039066 - CVE-2017-9048: stack overflow vulnerability xmlSnprintfElementContent fu...

CVE-2017-7375

A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes. Depending on the context, this may expose a higher-risk attack surface in libxml2 not...

CVE-2017-7376

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects...

Remote code execution

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library...