Security Bulletin: Vulnerabilities in libxml2 affect IBM Flex System Networking Switch products

Summary IBM Flex System Networking Switch products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Flex System Networking Switch products have addressed the following vulnerabilities in libxml2. Vulnerability Details: CVE-ID: CVE-2016-3627 Description:...

Security Bulletin: Vulnerabilities in libxml2 and zlib affect IBM Flex System Networking Switch Products

Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2 and zlib. Vulnerability Details: CVEID: CVE-2016-46...

Security Bulletin: Vulnerabilities in libxml2 affect IBM Virtual Fabric 10Gb Switch Module (CVE-2016-3627 CVE-2016-3705)

Summary IBM Virtual Fabric 10Gb Switch Module has addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Virtual Fabric 10Gb Switch Module has addressed the following vulnerabilities in libxml2. Vulnerability Details: CVE-ID: CVE-2016-3627 Description: libxml2 is...

Security Bulletin: Multiple vulnerabilities in libxml2 affect IBM Flex System Manger (FSM) (CVE-2013-2877, CVE-2014-0191, CVE-2014-3660)

Summary There are multiple vulnerabilities in libxml2 that is used by IBM Flex System Manager FSM. This bulletin addresses these vulnerabilities. Vulnerability Details Summary There are multiple vulnerabilities in libxml2 that is used by IBM Flex System Manager FSM. This bulletin addresses these...

Security Bulletin: Integrated Management Module II (IMM2) affected by vulnerabilities in libxml2 (CVE-2014-0191, CVE-2014-3660)

Summary Integrated Management Module II IMM2 is affected by vulnerabilities in libxml2 reported in 2014. Vulnerability Details Summary Integrated Management Module II IMM2 is affected by vulnerabilities in libxml2 reported in 2014. Vulnerability Details: CVE-ID: CVE-2014-0191 Description: Libxml2...

Security Bulletin: Vulnerabilities in libxml2 affect System Networking Products (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)

Summary Three vulnerabilities in libxml2 were disclosed in December 2014. The IBM System Networking Switch products listed below have addressed the vulnerabilities. Vulnerability Details Summary Three vulnerabilities in libxml2 were disclosed in December 2014. The IBM System Networking Switch...

Security Bulletin: IBM BladeCenter Advanced Management Module is affected by libxml2 vulnerabilities (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)

Summary Security vulnerabilities libxml2 affect IBM BladeCenter Advanced Management Module. Vulnerability Details Summary Security vulnerabilities libxml2 affect IBM BladeCenter Advanced Management Module. Vulnerability Details: CVE-ID: CVE-2014-0191 Description: Libxml2 is vulnerable to a denial...

Security Bulletin: A vulnerability in binutils affects IBM Flex System Manager (FSM): (CVE-2014-8501, CVE-2014-8502, CVE-2014-8503)

Summary Vulnerabilities have been found in libxml2 that is used by IBM Flex System Manager. Vulnerability Details Abstract Vulnerabilities have been found in libxml2 that is used by IBM Flex System Manager. Content Vulnerability Details: CVE-ID: CVE-2014-8501 Description: GNU Binutils is vulnerab...

Updated libxml2 packages fix security vulnerabilities

A flaw was found in libxml2 2.9.8. The xzdecomp function in xzlib.c, if --with-lzma is used, allows remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint CVE-2018-9251, CVE-2018-14567. A null pointer...

MGASA-2019-0047 Updated libxml2 packages fix security vulnerabilities

A flaw was found in libxml2 2.9.8. The xzdecomp function in xzlib.c, if --with-lzma is used, allows remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint CVE-2018-9251, CVE-2018-14567. A null pointer...

Nokogiri NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATHOPAND or XPATHOPOR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerab...

Heap-based Buffer Over-read

libxml2.so is vulnerable to heap-based buffer over-read. The xmlParseInternalSubset function does not return when the end of the internal subset is detected and input is processed further. This results in a heap-based buffer over-read which can lead to a denial of service...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service attacks due to improper prevention of entity expansion in the xmlStringLenDecodeEntities function in parser.c. A context-dependent attacker is able to cause a denial of service by exhausting CPU using specially crafted XML data...

Denial Of Service (DoS) Memory Consumption

Nokogiri versions before 1.6.6.4 contain a vulnerable version of libxml2 as a C extension. The vulnerability allows for memory consumption denial of service...

Denial Of Service (DoS)

libxml2.so is vulnerable to Denial Of Service DoS. parser.c does not prevent entity expansion properly which would allow a remote attacker to provide a specially crafted XML file to cause excessive entity substitutions even if entity substituion was disabled, causing a denial of service condition...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service DoS attacks. The vulnerability exists as parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service out-of-bounds read via a document that ends abruptly, related...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service DoS attacks. The vulnerability exists as libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service CPU and memory consumption via an XML file containing an entity declaration with long replacement text and many references ...

Denial Of Service (DoS)

libxml2 is vulnerable to denial of service DoS attacks. The vulnerability exists as an off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact v...

Denial Of Service (Dos)

libxml2 is vulnerable to denial of service. An attacker is able to crash the application via a malicious XML document containing malformed XPath expressions...

Denial Of Service (DoS)

libvirt is vulnerable to denial of service. When parsing XML documents using the libxml2 library, libvirt passes the XMLPARSENOENT flag and all XML entities in the parsed documents are expanded. This allows an attacker to parse an XML document which references a special file that blocks read acce...