Lucene search
UbuntuUSN-1656-1HistoryDec 06, 2012 - 12:00 a.m.
Libxml2 vulnerability
2012-12-0600:00:00
ubuntu.com
30
10 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.052 Low
EPSS
Percentile
92.9%
Releases
- Ubuntu 12.10
- Ubuntu 12.04
- Ubuntu 11.10
- Ubuntu 10.04
- Ubuntu 8.04
Packages
- libxml2 - GNOME XML library
Details
It was discovered that libxml2 had a heap-based buffer underflow
when parsing entities. If a user or automated system were tricked into
processing a specially crafted XML document, applications linked against
libxml2 could be made to crash or possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 8.04 | noarch | libxml2 | <Β 2.6.31.dfsg-2ubuntu1.11 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libxml2-dbg | <Β 2.6.31.dfsg-2ubuntu1.11 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libxml2-dev | <Β 2.6.31.dfsg-2ubuntu1.11 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libxml2-udeb | <Β 2.6.31.dfsg-2ubuntu1.11 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libxml2-utils | <Β 2.6.31.dfsg-2ubuntu1.11 | UNKNOWN |
| Ubuntu | 8.04 | noarch | python-libxml2 | <Β 2.6.31.dfsg-2ubuntu1.11 | UNKNOWN |
| Ubuntu | 8.04 | noarch | python-libxml2-dbg | <Β 2.6.31.dfsg-2ubuntu1.11 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libxml2 | <Β 2.8.0+dfsg1-5ubuntu2.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libxml2-dbg | <Β 2.8.0+dfsg1-5ubuntu2.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libxml2-dev | <Β 2.8.0+dfsg1-5ubuntu2.1 | UNKNOWN |
References
Related
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 08:50:59
openvas
openvas
RedHat Update for libxml2 RHSA-2012:1512-01
2012-12-04 00:00:00
VMware ESXi security update for third party library (VMSA-2013-0004)
2013-04-02 00:00:00
suse
suse
libxml2: fixed buffer overflow during decoding entities (important)
2012-12-17 12:08:33
Security update for libxml2 (important)
2012-12-12 17:09:09
libxml2: fixed buffer overflow during decoding entities (important)
2013-01-23 14:07:38
nessus
nessus
securityvulns
securityvulns
libxml2 buffer overflow
2012-12-06 00:00:00
Apple iTunes multiple security vulnerabilities
2014-01-29 00:00:00
APPLE-SA-2014-01-22-1 iTunes 11.1.4
2014-01-29 00:00:00
vmware
vmware
VMware ESXi and ESX security update for third party library
2013-03-28 00:00:00
VMware ESXi and ESX security update for third party library
2013-03-28 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2012-11-29 00:00:00
libxml2 security update
2013-02-28 00:00:00
mingw32-libxml2 security update
2013-01-31 00:00:00
redhat
redhat
(RHSA-2012:1512) Important: libxml2 security update
2012-11-29 00:00:00
(RHSA-2013:0217) Important: mingw32-libxml2 security update
2013-01-31 00:00:00
cve
cve
CVE-2012-5134
2012-11-28 01:55:00
amazon
amazon
Important: libxml2
2012-12-06 21:22:00
ubuntucve
ubuntucve
CVE-2012-5134
2012-11-27 00:00:00
debiancve
debiancve
CVE-2012-5134
2012-11-28 01:55:00
osv
osv
libxml2 - buffer overflow
2012-12-02 00:00:00
slackware
slackware
[slackware-security] libxml2
2012-12-07 03:51:19
prion
prion
Heap overflow
2012-11-28 01:55:00
debian
debian
[SECURITY] [DSA 2580-1] libxml security update
2012-12-02 20:54:41
centos
centos
libxml2 security update
2012-11-29 20:24:03
mingw32 security update
2013-02-01 00:53:30
threatpost
threatpost
Apple's iOS 7 Update Fixes 80 Security Bugs
2013-09-19 12:53:59
Google Repairs High-Risk Flaw in Chrome
2012-11-27 17:07:25
freebsd
freebsd
chromium -- multiple vulnerabilities
2012-11-26 00:00:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2013-11-10 00:00:00
chrome
chrome
Stable Channel Update
2012-11-26 00:00:00
seebug
seebug
Google Chrome 23.0.1271.91δΉεηζ¬ε€δΈͺθΏη¨ζΌζ΄
2012-11-27 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
10 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.052 Low
EPSS
Percentile
92.9%
Related for USN-1656-1