Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2018:3110-1
HistoryOct 12, 2018 - 12:12 p.m.

Security update for libxml2 (moderate)

2018-10-1212:12:16
lists.opensuse.org
57

0.029 Low

EPSS

Percentile

89.7%

JSON

This update for libxml2 fixes the following security issues:

  • CVE-2018-9251: The xz_decomp function allowed remote attackers to cause
    a denial of service (infinite loop) via a crafted XML file that triggers
    LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (bsc#1088279)
  • CVE-2018-14567: Prevent denial of service (infinite loop) via a crafted
    XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint
    (bsc#1105166)
  • CVE-2018-14404: Prevent NULL pointer dereference in the
    xmlXPathCompOpEval() function when parsing an invalid XPath expression
    in the XPATH_OP_AND or XPATH_OP_OR case leading to a denial of service
    attack (bsc#1102046)

This update was imported from the SUSE:SLE-15:Update update project.

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.0i586libxml2-tools< 2.9.7-lp150.2.3.1libxml2-tools-2.9.7-lp150.2.3.1.i586.rpm
openSUSE Leap15.0x86_64libxml2-tools< 2.9.7-lp150.2.3.1libxml2-tools-2.9.7-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0i586python2-libxml2-python-debuginfo< 2.9.7-lp150.2.3.1python2-libxml2-python-debuginfo-2.9.7-lp150.2.3.1.i586.rpm
openSUSE Leap15.0x86_64libxml2-devel-32bit< 2.9.7-lp150.2.3.1libxml2-devel-32bit-2.9.7-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libxml2-tools-debuginfo< 2.9.7-lp150.2.3.1libxml2-tools-debuginfo-2.9.7-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0x86_64python2-libxml2-python-debuginfo< 2.9.7-lp150.2.3.1python2-libxml2-python-debuginfo-2.9.7-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0i586libxml2-2-debuginfo< 2.9.7-lp150.2.3.1libxml2-2-debuginfo-2.9.7-lp150.2.3.1.i586.rpm
openSUSE Leap15.0x86_64python3-libxml2-python-debuginfo< 2.9.7-lp150.2.3.1python3-libxml2-python-debuginfo-2.9.7-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0x86_64python3-libxml2-python< 2.9.7-lp150.2.3.1python3-libxml2-python-2.9.7-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0i586libxml2-tools-debuginfo< 2.9.7-lp150.2.3.1libxml2-tools-debuginfo-2.9.7-lp150.2.3.1.i586.rpm
Rows per page:
1-10 of 261

Related

nessus 40
openvas 16
mageia 1
debian 2
suse 2
ibm 11
oraclelinux 2
fedora 2
redhat 5
rubygems 1
osv 6
redhatcve 3
ubuntucve 4
alpinelinux 3
prion 3
cve 3
debiancve 3
amazon 3
f5 1
altlinux 2
veracode 4
cloudfoundry 1
ubuntu 2
broadcom 1
github 1
archlinux 2
centos 1
photon 5
kitploit 1
tenable 1
ics 1
nessus
nessus
openSUSE Security Update : libxml2 (openSUSE-2018-1150)
2018-10-15 00:00:00
openSUSE Security Update : libxml2 (openSUSE-2019-785)
2019-03-27 00:00:00
SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2018:3080-1)
2019-01-02 00:00:00
openvas
openvas
openSUSE: Security Advisory for libxml2 (openSUSE-SU-2018:3110-1)
2018-10-26 00:00:00
Debian LTS: Security Advisory for libxml2 (DLA-1524-1)
2018-09-28 00:00:00
openSUSE: Security Advisory for libxml2 (openSUSE-SU-2018:3107-1)
2018-10-13 00:00:00
mageia
mageia
Updated libxml2 packages fix security vulnerabilities
2019-01-23 18:50:09
debian
debian
[SECURITY] [DLA 1524-1] libxml2 security update
2018-09-27 20:04:03
[SECURITY] [DLA 2369-1] libxml2 security update
2020-09-09 22:41:50
suse
suse
Security update for libxml2 (moderate)
2018-10-12 12:10:07
Security update for rmt-server (moderate)
2019-02-14 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in libxml2 affects IBM Watson Studio Local
2019-12-18 18:01:21
Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in libxml2 (CVE-2018-14404)
2023-12-07 22:45:03
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in libxml2 (CVE-2018-14404 CVE-2016-9318)
2020-01-09 19:18:07
oraclelinux
oraclelinux
libxml2 security update
2020-05-05 00:00:00
libxml2 security update
2020-04-06 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: libxml2-2.9.8-4.fc28
2018-08-07 01:20:06
[SECURITY] Fedora 27 Update: libxml2-2.9.8-4.fc27
2018-08-09 16:53:03
redhat
redhat
(RHSA-2020:1827) Moderate: libxml2 security update
2020-04-28 09:20:58
(RHSA-2020:1190) Moderate: libxml2 security update
2020-03-31 09:30:25
(RHSA-2019:1543) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP2 security update
2019-06-18 19:07:29
rubygems
rubygems
Nokogiri gem, via libxml2, is affected by multiple vulnerabilities
2018-10-03 21:00:00
osv
osv
libxml2 - security update
2018-09-27 00:00:00
Nokogiri NULL Pointer Dereference
2019-01-17 14:05:03
libxml2 - security update
2020-09-09 00:00:00
redhatcve
redhatcve
CVE-2018-14567
2018-08-22 02:19:05
CVE-2018-14404
2019-10-19 18:58:27
CVE-2018-9251
2018-04-09 20:20:56
ubuntucve
ubuntucve
CVE-2018-14567
2018-07-31 00:00:00
CVE-2018-14404
2018-07-19 00:00:00
CVE-2017-18258
2018-04-08 00:00:00
alpinelinux
alpinelinux
CVE-2018-14567
2018-08-16 20:29:00
CVE-2018-14404
2018-07-19 13:29:00
CVE-2018-9251
2018-04-04 02:29:00
prion
prion
Design/Logic Flaw
2018-08-16 20:29:00
Null pointer dereference
2018-07-19 13:29:00
Design/Logic Flaw
2018-04-04 02:29:00
cve
cve
CVE-2018-14567
2018-08-16 20:29:00
CVE-2018-14404
2018-07-19 13:29:00
CVE-2018-9251
2018-04-04 02:29:00
debiancve
debiancve
CVE-2018-14567
2018-08-16 20:29:00
CVE-2018-14404
2018-07-19 13:29:00
CVE-2018-9251
2018-04-04 02:29:00
amazon
amazon
Important: libxml2
2020-08-10 22:59:00
Important: libxml2
2020-07-21 16:34:00
Medium: libxml2
2018-09-05 19:31:00
f5
f5
K76678525 : libxml2 vulnerabilities CVE-2015-8035 CVE-2016-5131 CVE-2017-15412 CVE-2017-18258 CVE-2018-14404 CVE-2018-14567
2022-02-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package libxml2 version 1:2.9.9.0.52.f824-alt1
2019-05-22 00:00:00
Security fix for the ALT Linux 9 package libxml2 version 1:2.9.9.0.52.f824-alt1
2019-05-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-01 00:39:17
Denial Of Service (DoS)
2018-07-19 02:58:01
Copy-Paste Vulnerability (CPV) Through Libxml2
2018-10-16 03:04:15
cloudfoundry
cloudfoundry
USN-3739-1: libxml2 vulnerabilities | Cloud Foundry
2018-09-11 00:00:00
ubuntu
ubuntu
libxml2 vulnerabilities
2018-08-14 00:00:00
libxml2 vulnerabilities
2018-08-14 00:00:00
broadcom
broadcom
NULL pointer dereference in libxml2 through 2.9.8
2023-08-01 00:00:00
github
github
Nokogiri NULL Pointer Dereference
2019-01-17 14:05:03
archlinux
archlinux
[ASA-201810-3] libxml2: denial of service
2018-10-01 00:00:00
[ASA-201810-4] lib32-libxml2: denial of service
2018-10-01 00:00:00
centos
centos
libxml2 security update
2020-04-08 18:42:56
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0193
2018-11-06 00:00:00
Critical Photon OS Security Update - PHSA-2018-0193
2018-11-06 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0106
2018-11-02 00:00:00
kitploit
kitploit
Trivy - A Simple And Comprehensive Vulnerability Scanner For Containers, Suitable For CI
2019-11-05 12:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

0.029 Low

EPSS

Percentile

89.7%

JSON
Related for OPENSUSE-SU-2018:3110-1
nessus40openvas16mageia1debian2suse2ibm11oraclelinux2fedora2redhat5rubygems1osv6redhatcve3ubuntucve4alpinelinux3prion3cve3debiancve3amazon3f51altlinux2veracode4cloudfoundry1ubuntu2broadcom1github1archlinux2centos1photon5kitploit1tenable1ics1