libxml2递归实体远程拒绝服务漏洞

BUGTRAQ ID: 30783 CVECAN ID: CVE-2008-3281 libxml2软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml2库在解析某些XML内容时没有正确地检查递归深度，使用Libxml2库的应用程序在处理特制XML文档时可能会耗尽所有可用的内存和CPU资源。 XMLSoft Libxml2 2.6.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1631-1）以及相应补丁: DSA-1631-1：New libxml2 packages fix denial of...

libxml2 security update

CentOS Errata and Security Advisory CESA-2008:0836-02 Updated libxml2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 26th August 2008 The original fix used in this errata caused som...

[SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1631-1 [email protected] http://www.debian.org/security/ Steve Kemp August 22, 2008 http://www.debian.org/security/faq -...

Debian DSA-1631-2 : libxml2 - denial of service

Andreas Solberg discovered that libxml2, the GNOME XML library, could be forced to recursively evaluate entities, until available CPU and memory resources were exhausted. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

libxml2 security update

CentOS Errata and Security Advisory CESA-2008:0836 Updated libxml2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 26th August 2008 The original fix used in this errata caused some...

[SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1631-1 [email protected] http://www.debian.org/security/ Steve Kemp August 22, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

DTSA-158-1 libxml2 - denial of service

Bulletin has no description...

RHEL 2.1 / 3 / 4 / 5 : libxml2 (RHSA-2008:0836)

Updated libxml2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 26th August 2008 The original fix used in this errata caused some applications using the libxml2 library in an...

DSA-1631-1 libxml2 - denial of service

Bulletin has no description...

libxml2 -- two vulnerabilities

Secunia reports: Two vulnerabilities have been reported in Libxml2, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise an application using the library. 1 A recursion error exists when processing certain XML content. This can be exploited to e.g...

Moderate: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 26th August 2008 The original fix used in this errata caused some applications using the libxml2 library in an...

Security fix for the ALT Linux 9 package libxml2 version 1:2.6.32-alt2

Aug. 21, 2008 Alexey Tourbin 1:2.6.32-alt2 - applied upstream fix for recursive evaluation of entities CVE-2008-3281...

PT-2008-1091 · Xmlsoft +1 · Libxml2 +1

Name of the Vulnerable Software and Affected Versions: libxml2 versions 2.6.32 and earlier Description: The issue allows context-dependent attackers to cause a denial of service, consuming memory and CPU, via a crafted XML document. This is due to improper detection of recursion during entity...

Security fix for the ALT Linux 5 package libxml2 version 1:2.6.32-alt2

Aug. 21, 2008 Alexey Tourbin 1:2.6.32-alt2 - applied upstream fix for recursive evaluation of entities CVE-2008-3281...

[SECURITY] Fedora 9 Update: libxslt-1.1.24-2.fc9

This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. To use it you need to have a version of libxml2 =3D 2.6.27 installed. The xsltproc command is a command line interface to the XSLT eng ine...

[SECURITY] Fedora 8 Update: libxslt-1.1.24-2.fc8

This C library allows to transform XML files into other XML files or HTML, text, ... using the standard XSLT stylesheet transformation mechanism. To use it you need to have a version of libxml2 =3D 2.6.27 installed. The xsltproc command is a command line interface to the XSLT eng ine...

VLC Media Player < 0.8.6h Multiple Vulnerabilities

The version of VLC Media Player installed on the remote host reportedly includes versions of GnuTLS, libgcrypt, and libxml2 that are affected by various denial of service and buffer overflow vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33278;...

Updated libxml2 service console package

Updated libxml2 package to address a denial of service flaw. Thanks to the Google security team for identifying and reporting this issue. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2007-6284 to this issue...

VMSA-2008-0006:Updated libxml2 service console package

VMSA-2008-0006.1 Updated libxml2 service console package VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0006.1 VMware Security AdvisorySynopsis: Updated libxml2 service console package VMware Security AdvisoryIssue date: 2008-03-28 VMware Security AdvisoryUpdated on:...

GLSA-200801-20 : libxml2: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200801-20 libxml2: Denial of Service Brad Fitzpatrick reported that the xmlCurrentChar function does not properly handle some UTF-8 multibyte encodings. Impact : A remote attacker could entice a user to open a specially crafted XM...