Debian: Security Advisory (DSA-3593-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware 14.0 / 14.1 / current : libxml2 (SSA:2016-148-01)

New libxml2 packages are available for Slackware 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-148-01. The text itself is copyright C...

CVE-2016-4447

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service heap-based buffer underread and application crash via a crafted file, involving xmlParseName...

CVE-2016-4449

XML external entity XXE vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service resource consumption via unspecified vectors...

UBUNTU-CVE-2016-4447

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service heap-based buffer underread and application crash via a crafted file, involving xmlParseName...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libxml2-2.9.4-i486-1slack14.1.txz: Upgraded. This release fixes bugs and security issues: Heap-based buffer underreads due to...

Apple TV < 9.2 Multiple Vulnerabilities

Binary data 9336.prm...

Apple TV < 9.1 Multiple Vulnerabilities

Binary data 9334.prm...

Mac OS X 10.11.x < 10.11.4 Multiple Vulnerabilities

Binary data 9327.prm...

Libxml2 Formatted String Vulnerability

Libxml2 is the GNOME project team developed a C-based language used to parse XML documents library , which supports a variety of encoding formats , Xpath parsing , Well-formed and valid validation and so on. A format string vulnerability exists in Libxml2. An attacker could exploit this...

Unspecified Vulnerability in Libxml2

Libxml2 is the GNOME project team developed a C-based language used to parse XML documents library , which supports a variety of encoding formats , Xpath parsing , Well-formed and valid validation and so on. An unspecified vulnerability exists in Libxml2, which arises from a program's failure to...

Libxml2 heap buffer overflow vulnerability (CNVD-2016-03657)

Libxml2 is the GNOME project team developed a C-based language used to parse XML documents library , which supports a variety of encoding formats , Xpath parsing , Well-formed and valid validation and so on. A heap buffer overflow vulnerability exists in Libxml2's xmlParseName. An attacker can...

libxml2: multiple issues

CVE-2016-1762 denial of service A vulnerability has been discovered that allows remote attackers to cause a denial of service memory corruption via a crafted XML document. - CVE-2016-1833 denial of service A maliciously crafted file could cause the application to crash due to a heap-based...

libxml2 -- multiple vulnerabilities

Daniel Veillard reports: More format string warnings with possible format string vulnerability David Kilzer Avoid building recursive entities Daniel Veillard Heap-based buffer overread in htmlCurrentChar Pranjal Jumde Heap-based buffer-underreads due to xmlParseName David Kilzer Heap use-after-fr...

Apple iOS and OS X El Capitan XML Denial of Service Vulnerability

Apple iOS is an operating system on Apple's cell phones.OS X El Capitan is a dedicated set of operating systems developed for Mac computers. A denial of service vulnerability exists in libxml2 in Apple iOS and OS X El Capitan, which can be exploited by an attacker to crash an application, resulti...

Apple iOS/watchOS/tvOS and OS X El Capitan libxml2 arbitrary code execution vulnerability (CNVD-2016-03522)

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in libxml2 in Apple iOS, watchOS, and OS X El Capitan could be exploited by an attacker to submi...

Apple iOS/watchOS/tvOS and OS X El Capitan libxml2 arbitrary code execution vulnerability (CNVD-2016-03538)

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is an operating system for smartwatches; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a library developed by the GNOME project ...

Apple iOS/watchOS/tvOS and OS X El Capitan libxml2 arbitrary code execution vulnerability (CNVD-2016-03537)

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is an operating system for smartwatches; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a library developed by the GNOME project ...

Apple iOS/watchOS/tvOS and OS X El Capitan libxml2 arbitrary code execution vulnerability (CNVD-2016-03536)

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is an operating system for smartwatches; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a library developed by the GNOME project ...

Apple iOS/watchOS/tvOS and OS X El Capitan libxml2 arbitrary code execution vulnerability (CNVD-2016-03524)

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in libxml2 in Apple iOS, watchOS, and OS X El Capitan could be exploited by an attacker to submi...