Libxml2 Multiple Remote Stack Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/11526/info The 'libxml2' library is reported prone to multiple remote stack-based buffer-overflow vulnerabilities caused by insufficient boundary checks. Remote attackers may exploit these issues to execute arbitrary code...

lxml security update

Package : lxml Version : 2.2.8-2+deb6u1 CVE ID : CVE-2014-3146 Debian Bug : 746812 It was discovered that cleanhtml function of lxml pythonic bindings for the libxml2 and libxslt libraries performed insufficient sanitisation for some non-printable characters. This could lead to cross-site scripti...

lxml security update

Package : lxml Version : 2.2.8-2+deb6u1 CVE ID : CVE-2014-3146 Debian Bug : 746812 It was discovered that cleanhtml function of lxml pythonic bindings for the libxml2 and libxslt libraries performed insufficient sanitisation for some non-printable characters. This could lead to cross-site scripti...

DLA-0009-1 lxml - security update

Bulletin has no description...

Ubuntu: Security Advisory (USN-2214-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : libxml2 regression (USN-2214-3)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2214-3 advisory. USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a number of regressions. This update fixes the problem. We apologize for the inconvenienc...

USN-2214-3: libxml2 regression

USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a number of regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested...

USN-2214-3 libxml2 regression

USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a number of regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested...

Ubuntu: Security Advisory (USN-2214-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0975-1)

Fixed an integer overflow in libxml2 which could lead to crashes or potential code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-501. The text description of this...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0731-1)

specially crafted xpath statements could cause an out of bounds memory write %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-320. The text description of this plugin is C SUSE LL...

openSUSE Security Update : libxml2 (openSUSE-SU-2011:0839-1)

Specially crafted xml files could crash applications using libxml2 CVE-2011-1944. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-4811. The text description of this plugin is C SUSE LL...

openSUSE Security Update : libxml2 / python-libxml2 (openSUSE-SU-2014:0753-1)

Removed fix for CVE-2014-0191. This fix breaks existing applications and there's currently no way to prevent that. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-409. The text...

openSUSE Security Update : libxml2 (openSUSE-SU-2010:1004-1)

libxml2: Invalid memory access in the xpath handling has been fixed. CVE-2010-4008 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-3459. The text...

openSUSE Security Update : libxml2 (openSUSE-SU-2011:0839-1)

Specially crafted xml files could crash applications using libxml2 CVE-2011-1944. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-4811. The text description of this plugin is C SUSE LL...

openSUSE Security Update : libxml2 (openSUSE-SU-2014:0645-1)

fix for CVE-2014-0191 bnc876652 - libxml2: external parameter entity loaded when entity substitution is disabled - added libxml2-CVE-2014-0191.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : libxml2 (openSUSE-2012-30)

Specially crafted xml files could crash applications linked against libxml2 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-30. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libxml2 (openSUSE-SU-2011:0255-1)

A bug in the Xpath processing inside libxml2 has been fixed. CVE-2010-4494 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-3758. The text description o...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0342-1)

This update of libxml2 fixes the hash table collision flaw which could be exploited by attackers to cause a Denial of Service CVE-2012-0841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libxml2 (openSUSE-SU-2013:0552-1)

libxml2 was updated to limit internal entity expansion denial of service problems IXE CVE-2013-0338 bnc805233 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-263. The text...