Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1904-1
HistoryJul 15, 2013 - 12:00 a.m.

libxml2 vulnerabilities

2013-07-1500:00:00
ubuntu.com
27

8.6 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.046 Low

EPSS

Percentile

92.4%

JSON

Releases

  • Ubuntu 13.04
  • Ubuntu 12.10
  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • libxml2 - GNOME XML library

Details

It was discovered that libxml2 would load XML external entities by default.
If a user or automated system were tricked into opening a specially crafted
document, an attacker could possibly obtain access to arbitrary files or
cause resource consumption. This issue only affected Ubuntu 10.04 LTS,
Ubuntu 12.04 LTS, and Ubuntu 12.10. (CVE-2013-0339)

It was discovered that libxml2 incorrectly handled documents that end
abruptly. If a user or automated system were tricked into opening a
specially crafted document, an attacker could possibly cause libxml2 to
crash, resulting in a denial of service. (CVE-2013-2877)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchlibxml2< 2.9.0+dfsg1-4ubuntu4.2UNKNOWN
Ubuntu13.04noarchlibxml2-dbg< 2.9.0+dfsg1-4ubuntu4.2UNKNOWN
Ubuntu13.04noarchlibxml2-dev< 2.9.0+dfsg1-4ubuntu4.2UNKNOWN
Ubuntu13.04noarchlibxml2-udeb< 2.9.0+dfsg1-4ubuntu4.2UNKNOWN
Ubuntu13.04noarchlibxml2-utils< 2.9.0+dfsg1-4ubuntu4.2UNKNOWN
Ubuntu13.04noarchlibxml2-utils-dbg< 2.9.0+dfsg1-4ubuntu4.2UNKNOWN
Ubuntu13.04noarchpython-libxml2< 2.9.0+dfsg1-4ubuntu4.2UNKNOWN
Ubuntu13.04noarchpython-libxml2-dbg< 2.9.0+dfsg1-4ubuntu4.2UNKNOWN
Ubuntu12.10noarchlibxml2< 2.8.0+dfsg1-5ubuntu2.3UNKNOWN
Ubuntu12.10noarchlibxml2-dbg< 2.8.0+dfsg1-5ubuntu2.3UNKNOWN
Rows per page:
1-10 of 301

Related

nessus 30
openvas 31
ubuntu 1
prion 3
cve 3
veracode 2
ubuntucve 2
debiancve 2
debian 5
securityvulns 7
mageia 1
freebsd 3
amazon 1
redhat 1
centos 1
oraclelinux 1
suse 2
ibm 4
gentoo 3
vmware 2
osv 35
threatpost 1
chrome 1
rosalinux 1
tenable 1
oracle 1
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : libxml2 regression (USN-1904-2)
2013-07-18 00:00:00
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : libxml2 vulnerabilities (USN-1904-1)
2013-07-16 00:00:00
Mandriva Linux Security Advisory : libxml2 (MDVSA-2013:198)
2013-07-25 00:00:00
openvas
openvas
Ubuntu Update for libxml2 USN-1904-2
2013-08-01 00:00:00
Ubuntu Update for libxml2 USN-1904-1
2013-08-01 00:00:00
Ubuntu: Security Advisory (USN-1904-2)
2013-08-01 00:00:00
ubuntu
ubuntu
libxml2 regression
2013-07-17 00:00:00
prion
prion
Xxe
2014-01-21 18:55:00
Out-of-bounds
2013-07-10 10:55:00
Design/Logic Flaw
2015-01-21 18:59:00
cve
cve
CVE-2013-0339
2014-01-21 18:55:00
CVE-2013-2877
2013-07-10 10:55:00
CVE-2015-0386
2015-01-21 18:59:00
veracode
veracode
XML External Entity (XXE)
2018-07-25 09:08:45
Denial Of Service (DoS)
2019-01-15 09:01:56
ubuntucve
ubuntucve
CVE-2013-0339
2013-02-26 00:00:00
CVE-2013-2877
2013-07-10 00:00:00
debiancve
debiancve
CVE-2013-0339
2014-01-21 18:55:00
CVE-2013-2877
2013-07-10 10:55:00
debian
debian
[SECURITY] [DSA 2779-1] libxml2 security update
2013-10-13 21:02:25
[SECURITY] [DSA 2779-1] libxml2 security update
2013-10-13 21:02:25
[SECURITY] [DSA 2652-1] libxml2 security update
2013-03-26 05:40:13
securityvulns
securityvulns
libxml2 DoS
2013-07-15 00:00:00
[SECURITY] [DSA 2652-1] libxml2 security update
2013-04-08 00:00:00
libxml2 DoS
2013-04-08 00:00:00
mageia
mageia
Updated libxml2 packages fix CVE-2013-2877
2013-07-21 12:41:56
freebsd
freebsd
libxml2 -- lack of end-of-document check DoS
2013-04-11 00:00:00
libxml2 -- cpu consumption Dos
2013-02-21 00:00:00
chromium -- multiple vulnerabilities
2013-07-09 00:00:00
amazon
amazon
Low: libxml2
2014-05-21 10:29:00
redhat
redhat
(RHSA-2014:0513) Moderate: libxml2 security update
2014-05-19 00:00:00
centos
centos
libxml2 security update
2014-05-19 13:08:11
oraclelinux
oraclelinux
libxml2 security update
2014-05-19 00:00:00
suse
suse
Security update for libxml2 (important)
2013-11-04 17:04:12
Security update for libxml2 (important)
2013-11-04 18:04:12
ibm
ibm
Security Bulletin: Vulnerabilities in libxml2 affect System Networking Products (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)
2019-01-31 01:55:01
Security Bulletin: IBM BladeCenter Advanced Management Module is affected by libxml2 vulnerabilities (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)
2019-01-31 01:45:01
Security Bulletin: Multiple vulnerabilities in libxml2 affect IBM Flex System Manger (FSM) (CVE-2013-2877, CVE-2014-0191, CVE-2014-3660)
2019-01-31 02:10:01
gentoo
gentoo
libxml2: Multiple vulnerabilities
2013-11-10 00:00:00
AMD64 x86 emulation base libraries: Multiple vulnerabilities
2014-12-12 00:00:00
Chromium, V8: Multiple vulnerabilities
2013-09-24 00:00:00
vmware
vmware
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
osv
osv
chromium-browser - several
2013-07-17 00:00:00
CVE-2016-9597
2018-07-30 14:29:02
CVE-2016-4483
2017-04-11 16:59:00
threatpost
threatpost
Google Fixes 17 Flaws in Chrome 28
2013-07-10 09:37:49
chrome
chrome
Stable Channel Update
2013-07-09 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1905
2021-07-02 17:25:35
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00

8.6 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.046 Low

EPSS

Percentile

92.4%

JSON
Related for USN-1904-1
nessus30openvas31ubuntu1prion3cve3veracode2ubuntucve2debiancve2debian5securityvulns7mageia1freebsd3amazon1redhat1centos1oraclelinux1suse2ibm4gentoo3vmware2osv35threatpost1chrome1rosalinux1tenable1oracle1