8248 matches found
Debian Security Advisory DSA 455-1 (libxml, libxml2)
The remote host is missing an update to libxml, libxml2 announced via advisory DSA 455-1. OpenVAS Vulnerability Test $Id: deb4551.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 455-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 582-1 (libxml, libxml2)
The remote host is missing an update to libxml, libxml2 announced via advisory DSA 582-1. OpenVAS Vulnerability Test $Id: deb5821.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 582-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
libxml2 xmlCurrentChar()函数UTF-8解析远程拒绝服务漏洞
BUGTRAQ ID: 27248 CVECAN ID: CVE-2007-6284 libxml2软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml库在处理包含畸形数据的XML文件时存在漏洞，远程攻击者可能利用此漏洞导致系统不可用。 libxml库的UTF-8解码函数xmlCurrentChar没有检查UTF-8的正确性，如果用户使用链接到该库的应用程序打开了包含有多字节组合的畸形XML内容的话，就会导致函数库陷入死循环挂起，消耗大量系统资源。 XMLSoft Libxml2 2.6.31 Debian ------...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxml2 vulnerability (USN-569-1)
Brad Fitzpatrick discovered that libxml2 did not correctly handle certain UTF-8 sequences. If a remote attacker were able to trick a user or automated system into processing a specially crafted XML document, the application linked against libxml2 could enter an infinite loop, leading to a denial ...
USN-569-1: libxml2 vulnerability
Brad Fitzpatrick discovered that libxml2 did not correctly handle certain UTF-8 sequences. If a remote attacker were able to trick a user or automated system into processing a specially crafted XML document, the application linked against libxml2 could enter an infinite loop, leading to a denial ...
Security fix for the ALT Linux 9 package libxml2 version 1:2.6.31-alt1
Jan. 14, 2008 Alexey Tourbin 1:2.6.31-alt1 - 2.6.30+svn3661 - 2.6.31 fixes CVE-2007-6284...
CentOS 3 / 4 / 5 : libxml2 (CESA-2008:0032)
Updated libxml2 packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XML files. It includes support to read, modify, and writ...
Debian DSA-1461-1 : libxml2 - missing input validation
Brad Fitzpatrick discovered that the UTF-8 decoding functions of libxml2, the GNOME XML library, validate UTF-8 correctness insufficiently, which may lead to denial of service by forcing libxml2 into an infinite loop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Security fix for the ALT Linux 5 package libxml2 version 1:2.6.31-alt1
Jan. 14, 2008 Alexey Tourbin 1:2.6.31-alt1 - 2.6.30+svn3661 - 2.6.31 fixes CVE-2007-6284...
Fedora 7 : libxml2-2.6.31-1.fc7 (2008-0477)
This release fixes a potential Denial of Service attack on services using libxml2 to parse user provided XML. All users are invited to upgrade. Fixes CVE-2007-6284 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
Fedora 8 : libxml2-2.6.31-1.fc8 (2008-0462)
This release fixes a potential Denial of Service attack on services using libxml2 to parse user provided XML. All users are invited to upgrade. Fixes CVE-2007-6284 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
RHEL 2.1 / 3 / 4 / 5 : libxml2 (RHSA-2008:0032)
Updated libxml2 packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XML files. It includes support to read, modify, and writ...
[SECURITY] [DSA 1461-1] New libxml2 packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1461-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 13, 2008 http://www.debian.org/security/faq -...
libxml2 security update
CentOS Errata and Security Advisory CESA-2008:0032-03 Updated libxml2 packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XM...
DSA-1461-1 libxml2 - denial of service
Bulletin has no description...
Design/Logic Flaw
The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...
CVE-2007-6284
The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...
CVE-2007-6284
The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service infinite loop via XML containing invalid UTF-8 sequences...
