Security Bulletin: Vulnerabilities in libxml2 and zlib affect IBM Virtual Fabric 10Gb Switch Module

Summary IBM Virtual Fabric 10Gb Switch Module has addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details Summary IBM Virtual Fabric 10Gb Switch Module has addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details: CVEID: CVE-2016-4658...

Security Bulletin: Vulnerabilities in libxml2 affect IBM Virtual Fabric 10Gb Switch Module (CVE-2016-3627 CVE-2016-3705)

Summary IBM Virtual Fabric 10Gb Switch Module has addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Virtual Fabric 10Gb Switch Module has addressed the following vulnerabilities in libxml2. Vulnerability Details: CVE-ID: CVE-2016-3627 Description: libxml2 is...

Security Bulletin: Vulnerability in libxml2 affects IBM Chassis Management Module (CVE-2017-5969)

Summary IBM Chassis Management Module has addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM Chassis Management Module has addressed the following vulnerability in libxml2. Vulnerability Details: CVEID: CVE-2017-5969 Description: libxml2 is vulnerable to a denial ...

Security Bulletin: Vulnerability in libxml2 affects IBM Flex System Networking Switch products (CVE-2015-8710)

Summary IBM System Networking Switch products have addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM System Networking Switch products have addressed the following vulnerability in libxml2. Vulnerability Details CVE-ID: CVE-2015-8710 Description: Libxml2 is...

Security Bulletin: Vulnerability libxml2 affects IBM System Networking RackSwitch products (CVE-2015-8710)

Summary IBM System Networking RackSwitch products have addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM System Networking RackSwitch products have addressed the following vulnerability in libxml2. Vulnerability Details CVE-ID: CVE-2015-8710 Description: Libxml2 ...

Security Bulletin: Vulnerabilities in libxml2 affect IBM RackSwitch Products

Summary IBM RackSwitch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM RackSwitch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details: CVEID: CVE-2017-9050 Description: libxml2 is vulnerable to a heap-based...

Security Bulletin: Vulnerabilities in libxml2 affect IBM Flex System Networking Switch Products

Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details CVEID: CVE-2017-9050 Description:...

Security Bulletin: Vulnerabilities in libxml2 affect IBM Flex System Networking Switch Products

Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details CVEID: CVE-2017-7376 Description:...

Security Bulletin: Vulnerabilities in libxml2 affect IBM RackSwitch Networking products

Summary IBM RackSwitch Networking products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM RackSwitch Networking products have addressed the following vulnerabilities in libxml2. Vulnerability Details: CVE-ID: CVE-2016-3627 Description: libxml2 is...

Security Bulletin: Multiple vulnerabilities in libxml2 affect IBM Flex System Manger (FSM) (CVE-2013-2877, CVE-2014-0191, CVE-2014-3660)

Summary There are multiple vulnerabilities in libxml2 that is used by IBM Flex System Manager FSM. This bulletin addresses these vulnerabilities. Vulnerability Details Summary There are multiple vulnerabilities in libxml2 that is used by IBM Flex System Manager FSM. This bulletin addresses these...

Security Bulletin: Integrated Management Module II (IMM2) affected by vulnerabilities in libxml2 (CVE-2014-0191, CVE-2014-3660)

Summary Integrated Management Module II IMM2 is affected by vulnerabilities in libxml2 reported in 2014. Vulnerability Details Summary Integrated Management Module II IMM2 is affected by vulnerabilities in libxml2 reported in 2014. Vulnerability Details: CVE-ID: CVE-2014-0191 Description: Libxml2...

Security Bulletin: Vulnerabilities in libxml2 affect System Networking Products (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)

Summary Three vulnerabilities in libxml2 were disclosed in December 2014. The IBM System Networking Switch products listed below have addressed the vulnerabilities. Vulnerability Details Summary Three vulnerabilities in libxml2 were disclosed in December 2014. The IBM System Networking Switch...

Security Bulletin: IBM BladeCenter Advanced Management Module is affected by libxml2 vulnerabilities (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)

Summary Security vulnerabilities libxml2 affect IBM BladeCenter Advanced Management Module. Vulnerability Details Summary Security vulnerabilities libxml2 affect IBM BladeCenter Advanced Management Module. Vulnerability Details: CVE-ID: CVE-2014-0191 Description: Libxml2 is vulnerable to a denial...

Security Bulletin: A vulnerability in binutils affects IBM Flex System Manager (FSM): (CVE-2014-8501, CVE-2014-8502, CVE-2014-8503)

Summary Vulnerabilities have been found in libxml2 that is used by IBM Flex System Manager. Vulnerability Details Abstract Vulnerabilities have been found in libxml2 that is used by IBM Flex System Manager. Content Vulnerability Details: CVE-ID: CVE-2014-8501 Description: GNU Binutils is vulnerab...

MGASA-2019-0047 Updated libxml2 packages fix security vulnerabilities

A flaw was found in libxml2 2.9.8. The xzdecomp function in xzlib.c, if --with-lzma is used, allows remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint CVE-2018-9251, CVE-2018-14567. A null pointer...

Updated libxml2 packages fix security vulnerabilities

A flaw was found in libxml2 2.9.8. The xzdecomp function in xzlib.c, if --with-lzma is used, allows remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint CVE-2018-9251, CVE-2018-14567. A null pointer...

Nokogiri NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATHOPAND or XPATHOPOR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerab...

Heap-based Buffer Over-read

libxml2.so is vulnerable to heap-based buffer over-read. The xmlParseInternalSubset function does not return when the end of the internal subset is detected and input is processed further. This results in a heap-based buffer over-read which can lead to a denial of service...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service attacks due to improper prevention of entity expansion in the xmlStringLenDecodeEntities function in parser.c. A context-dependent attacker is able to cause a denial of service by exhausting CPU using specially crafted XML data...

Denial Of Service (DoS) Memory Consumption

Nokogiri versions before 1.6.6.4 contain a vulnerable version of libxml2 as a C extension. The vulnerability allows for memory consumption denial of service...