Debian Security Advisory DSA 1461-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 1461-1. OpenVAS Vulnerability Test $Id: deb14611.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1461-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1461-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libxml2: Denial of service

Background libxml2 is the XML eXtended Markup Language C parser and toolkit initially developed for the Gnome project. Description Brad Fitzpatrick reported that the xmlCurrentChar function does not properly handle some UTF-8 multibyte encodings. Impact A remote attacker could entice a user to op...

openSUSE 10 Security Update : libxml2 (libxml2-4841)

libxml2 contained a DoS condition in xmlCurrentChar's UTF-8 processing. CVE-2007-6284 has been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-4841. The text...

SuSE 10 Security Update : libxml2 (ZYPP Patch Number 4840)

libxml2 contained a DoS condition in xmlCurrentChar's UTF-8 processing. CVE-2007-6284 has been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Debian Security Advisory DSA 582-1 (libxml, libxml2)

The remote host is missing an update to libxml, libxml2 announced via advisory DSA 582-1. OpenVAS Vulnerability Test $Id: deb5821.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 582-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 455-1 (libxml, libxml2)

The remote host is missing an update to libxml, libxml2 announced via advisory DSA 455-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 455-1 (libxml, libxml2)

The remote host is missing an update to libxml, libxml2 announced via advisory DSA 455-1. OpenVAS Vulnerability Test $Id: deb4551.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 455-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-582-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libxml2 xmlCurrentChar()函数UTF-8解析远程拒绝服务漏洞

BUGTRAQ ID: 27248 CVECAN ID: CVE-2007-6284 libxml2软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml库在处理包含畸形数据的XML文件时存在漏洞，远程攻击者可能利用此漏洞导致系统不可用。 libxml库的UTF-8解码函数xmlCurrentChar没有检查UTF-8的正确性，如果用户使用链接到该库的应用程序打开了包含有多字节组合的畸形XML内容的话，就会导致函数库陷入死循环挂起，消耗大量系统资源。 XMLSoft Libxml2 2.6.31 Debian ------...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxml2 vulnerability (USN-569-1)

Brad Fitzpatrick discovered that libxml2 did not correctly handle certain UTF-8 sequences. If a remote attacker were able to trick a user or automated system into processing a specially crafted XML document, the application linked against libxml2 could enter an infinite loop, leading to a denial ...

USN-569-1: libxml2 vulnerability

Brad Fitzpatrick discovered that libxml2 did not correctly handle certain UTF-8 sequences. If a remote attacker were able to trick a user or automated system into processing a specially crafted XML document, the application linked against libxml2 could enter an infinite loop, leading to a denial ...

CentOS 3 / 4 / 5 : libxml2 (CESA-2008:0032)

Updated libxml2 packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XML files. It includes support to read, modify, and writ...

Debian DSA-1461-1 : libxml2 - missing input validation

Brad Fitzpatrick discovered that the UTF-8 decoding functions of libxml2, the GNOME XML library, validate UTF-8 correctness insufficiently, which may lead to denial of service by forcing libxml2 into an infinite loop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Fedora 8 : libxml2-2.6.31-1.fc8 (2008-0462)

This release fixes a potential Denial of Service attack on services using libxml2 to parse user provided XML. All users are invited to upgrade. Fixes CVE-2007-6284 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Security fix for the ALT Linux 9 package libxml2 version 1:2.6.31-alt1

Jan. 14, 2008 Alexey Tourbin 1:2.6.31-alt1 - 2.6.30+svn3661 - 2.6.31 fixes CVE-2007-6284...

Security fix for the ALT Linux 5 package libxml2 version 1:2.6.31-alt1

Jan. 14, 2008 Alexey Tourbin 1:2.6.31-alt1 - 2.6.30+svn3661 - 2.6.31 fixes CVE-2007-6284...

RHEL 2.1 / 3 / 4 / 5 : libxml2 (RHSA-2008:0032)

Updated libxml2 packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XML files. It includes support to read, modify, and writ...

Fedora 7 : libxml2-2.6.31-1.fc7 (2008-0477)

This release fixes a potential Denial of Service attack on services using libxml2 to parse user provided XML. All users are invited to upgrade. Fixes CVE-2007-6284 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

[SECURITY] [DSA 1461-1] New libxml2 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1461-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 13, 2008 http://www.debian.org/security/faq -...