Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxml2 vulnerability (USN-569-1)

Brad Fitzpatrick discovered that libxml2 did not correctly handle certain UTF-8 sequences. If a remote attacker were able to trick a user or automated system into processing a specially crafted XML document, the application linked against libxml2 could enter an infinite loop, leading to a denial ...

USN-569-1: libxml2 vulnerability

Brad Fitzpatrick discovered that libxml2 did not correctly handle certain UTF-8 sequences. If a remote attacker were able to trick a user or automated system into processing a specially crafted XML document, the application linked against libxml2 could enter an infinite loop, leading to a denial ...

CentOS 3 / 4 / 5 : libxml2 (CESA-2008:0032)

Updated libxml2 packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XML files. It includes support to read, modify, and writ...

Debian DSA-1461-1 : libxml2 - missing input validation

Brad Fitzpatrick discovered that the UTF-8 decoding functions of libxml2, the GNOME XML library, validate UTF-8 correctness insufficiently, which may lead to denial of service by forcing libxml2 into an infinite loop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Fedora 8 : libxml2-2.6.31-1.fc8 (2008-0462)

This release fixes a potential Denial of Service attack on services using libxml2 to parse user provided XML. All users are invited to upgrade. Fixes CVE-2007-6284 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Security fix for the ALT Linux 5 package libxml2 version 1:2.6.31-alt1

Jan. 14, 2008 Alexey Tourbin 1:2.6.31-alt1 - 2.6.30+svn3661 - 2.6.31 fixes CVE-2007-6284...

Security fix for the ALT Linux 9 package libxml2 version 1:2.6.31-alt1

Jan. 14, 2008 Alexey Tourbin 1:2.6.31-alt1 - 2.6.30+svn3661 - 2.6.31 fixes CVE-2007-6284...

Fedora 7 : libxml2-2.6.31-1.fc7 (2008-0477)

This release fixes a potential Denial of Service attack on services using libxml2 to parse user provided XML. All users are invited to upgrade. Fixes CVE-2007-6284 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

RHEL 2.1 / 3 / 4 / 5 : libxml2 (RHSA-2008:0032)

Updated libxml2 packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XML files. It includes support to read, modify, and writ...

[SECURITY] [DSA 1461-1] New libxml2 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1461-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 13, 2008 http://www.debian.org/security/faq -...

libxml2 security update

CentOS Errata and Security Advisory CESA-2008:0032-03 Updated libxml2 packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XM...

DSA-1461-1 libxml2 - denial of service

Bulletin has no description...

CVE-2007-6284

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...

CVE-2007-6284

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...

Design/Logic Flaw

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...

CVE-2007-6284

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...

DEBIAN-CVE-2007-6284

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...

CVE-2007-6284

CVE-2007-6284 describes a denial-of-service vulnerability in libxml2 where the function xmlCurrentChar() mishandles certain UTF-8 sequences, allowing context-dependent attackers to cause an infinite loop or high CPU consumption when parsing XML. The issue is triggered by malformed XML content and...

CVE-2007-6284

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...

CVE-2007-6284: Undefined Security Weakness

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...