CVE-2013-1969: Undefined Security Weakness

Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to the 1 htmlParseChunk and 2 xmldecldone functions, as demonstrated by a buffer...

Fedora Update for libxml2 FEDORA-2013-6110

Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2013-6110 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 18 : libxml2-2.9.1-1.fc18 (2013-6110)

New upstream release 2.9.1 Fixes a couple of potential security issues and a number of bug Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2013-1969

Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to the 1 htmlParseChunk and 2 xmldecldone functions, as demonstrated by a buffer...

CVE-2013-0338: Improper Restriction of Operations within the Bounds of a Memory Buffer

libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service CPU and memory consumption via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity...

Fedora Update for libxml2 FEDORA-2013-6110

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : libxml2 (MDVSA-2013:056)

Multiple vulnerabilities was found and corrected in libxml2 : A heap-buffer overflow was found in the way libxml2 decoded certain XML entitites. A remote attacker could provide a specially crafted XML file, which once opened in an application linked against libxml would cause that application to...

Fedora Update for libxslt FEDORA-2013-4507

Check for the Version of libxslt OpenVAS Vulnerability Test Fedora Update for libxslt FEDORA-2013-4507 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 18 Update: libxslt-1.1.28-1.fc18

This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. To use it you need to have a version of libxml2 =3D 2.6.27 installed. The xsltproc command is a command line interface to the XSLT eng ine...

[SECURITY] [DSA 2659-1] libapache-mod-security security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2659-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 09, 2013 http://www.debian.org/security/faq -...

libxml2 -- lack of end-of-document check DoS

CVE MITRE reports: parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service out-of-bounds read via a document that ends abruptly, related to the lack of certain checks for the XMLPARSEREOF state...

Debian DSA-2659-1 : libapache-mod-security - XML external entity processing vulnerability

Timur Yunusov and Alexey Osipov from Positive Technologies discovered that the XML files parser of ModSecurity, an Apache module whose purpose is to tighten the Web application security, is vulnerable to XML external entities attacks. A specially crafted XML file provided by a remote attacker,...

DSA-2659-1 libapache-mod-security - XML external entity processing vulnerability

Bulletin has no description...

Debian Security Advisory DSA 2659-1 (libapache-mod-security - XML external entity processing vulnerability)

Timur Yunusov and Alexey Osipov from Positive Technologies discovered that the XML files parser of ModSecurity, an Apache module whose purpose is to tighten the Web application security, is vulnerable to XML external entities attacks. A specially-crafted XML file provided by a remote attacker,...

[SECURITY] [DSA 2652-1] libxml2 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2652-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 24, 2013 http://www.debian.org/security/faq -...

libxml2 DoS

CPU exhaustion...

FreeBSD : libxml2 -- cpu consumption Dos (843a4641-9816-11e2-9c51-080027019be0)

Kurt Seifried reports : libxml2 is affected by the expansion of internal entities which can be used to consume resources and external entities which can cause a denial of service against other services, be used to port scan, etc... %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

PT-2013-1219

Name of the Vulnerable Software and Affected Versions Python versions 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6 libxml2 versions prior to 2.9.1-r1 Description The issue allows remote attackers to cause a denial of service, resulting in resource consumption and crash, via an XML Entity Expansion XEE attack...

Ubuntu Update for libxml2 USN-1782-1

Check for the Version of libxml2 OpenVAS Vulnerability Test $Id: gbubuntuUSN17821.nasl 8542 2018-01-26 06:57:28Z teissa $ Ubuntu Update for libxml2 USN-1782-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

VMSA-2013-0004 VMware ESXi security update for third party library

The remote ESXi is missing one or more security related Updates from VMSA-2013-0004. Relevant Releases ESXi 5.1 without patch ESXi510-201304101 ESXi 5.0 without patch ESXi500-201303101 ESXi 4.0 without patch ESXi400-201305001 ESXi 4.1 without patch ESXi410-201304401 Problem Description The ESXi...