Lucene search
UbuntuUSN-2389-1HistoryOct 27, 2014 - 12:00 a.m.
libxml2 vulnerability
2014-10-2700:00:00
ubuntu.com
37
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.015 Low
EPSS
Percentile
86.5%
Releases
- Ubuntu 14.04 ESM
- Ubuntu 12.04
- Ubuntu 10.04
Packages
- libxml2 - GNOME XML library
Details
It was discovered that libxml2 would incorrectly perform entity
substitution even when requested not to. If a user or automated system were
tricked into opening a specially crafted document, an attacker could
possibly cause resource consumption, resulting in a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | libxml2 | < 2.9.1+dfsg1-3ubuntu4.4 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libxml2-dbg | < 2.9.1+dfsg1-3ubuntu4.4 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libxml2-dev | < 2.9.1+dfsg1-3ubuntu4.4 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libxml2-udeb | < 2.9.1+dfsg1-3ubuntu4.4 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libxml2-utils | < 2.9.1+dfsg1-3ubuntu4.4 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libxml2-utils-dbg | < 2.9.1+dfsg1-3ubuntu4.4 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-libxml2 | < 2.9.1+dfsg1-3ubuntu4.4 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-libxml2-dbg | < 2.9.1+dfsg1-3ubuntu4.4 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libxml2 | < 2.7.8.dfsg-5.1ubuntu4.11 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libxml2-dbg | < 2.7.8.dfsg-5.1ubuntu4.11 | UNKNOWN |
References
Related
nessus
nessus
Amazon Linux AMI : libxml2 (ALAS-2014-444)
2014-11-18 00:00:00
RHEL 5 : libxml2 (RHSA-2014:1885)
2014-11-21 00:00:00
F5 Networks BIG-IP : libxml2 vulnerability (SOL15872)
2014-12-05 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: libxml2-2.9.1-2.fc19
2014-11-22 12:42:36
[SECURITY] Fedora 21 Update: libxml2-2.9.1-6.fc21
2014-11-01 17:15:32
[SECURITY] Fedora 20 Update: libxml2-2.9.1-3.fc20
2014-10-18 16:58:16
f5
f5
K15872 : libxml2 vulnerability CVE-2014-3660
2015-09-16 00:00:00
SOL15872 - libxml2 vulnerability CVE-2014-3660
2014-12-04 00:00:00
K61570943 : Multiple libXML2 vulnerabilities
2016-02-15 00:00:00
debian
debian
[SECURITY] [DSA 3057-2] libxml2 regression update
2015-04-07 18:58:44
[SECURITY] [DSA 3057-2] libxml2 regression update
2015-04-07 18:58:44
[SECURITY] [DSA 3057-1] libxml2 security update
2014-10-26 21:19:20
cve
cve
CVE-2014-3660
2014-11-04 16:55:00
CVE-2015-5312
2015-12-15 21:59:00
amazon
amazon
Medium: libxml2
2014-11-11 10:26:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1440-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-80-1)
2023-03-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-444)
2015-09-08 00:00:00
prion
prion
Privilege escalation
2014-11-04 16:55:00
Code injection
2015-12-15 21:59:00
veracode
veracode
Denial Of Service (DoS)
2018-08-13 07:27:07
Denial Of Service (DoS)
2019-01-15 09:02:26
redhat
redhat
(RHSA-2014:1655) Moderate: libxml2 security update
2014-10-16 00:00:00
(RHSA-2014:1885) Moderate: libxml2 security update
2014-11-20 00:00:00
osv
osv
libxml2 - security update
2014-10-29 00:00:00
libxml2 - regression update
2014-10-26 00:00:00
libxml2 - security update
2014-10-26 00:00:00
securityvulns
securityvulns
libxml DoS
2014-10-27 00:00:00
[ MDVSA-2014:204 ] libxml2
2014-10-27 00:00:00
APPLE-SA-2015-08-13-3 iOS 8.4.1
2015-08-17 00:00:00
ubuntucve
ubuntucve
CVE-2014-3660
2014-10-16 00:00:00
CVE-2015-5312
2015-11-26 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2014-11-20 00:00:00
libxml2 security update
2014-10-16 00:00:00
libxml2 security and bug fix update
2015-07-29 00:00:00
centos
centos
libxml2 security update
2014-11-20 21:10:50
libxml2 security update
2014-10-21 15:08:38
gentoo
gentoo
libxml2: Denial of service
2014-12-10 00:00:00
debiancve
debiancve
CVE-2014-3660
2014-11-04 16:55:00
CVE-2015-5312
2015-12-15 21:59:00
mageia
mageia
Updated libxml2 packages fix security vulnerability
2014-10-23 17:27:57
freebsd
freebsd
libxml2 -- Denial of service
2014-10-16 00:00:00
ibm
ibm
archlinux
archlinux
libxml2: Denial of service
2014-10-24 00:00:00
github
github
Nokogiri subject to DoS via libxml2 vulnerability
2018-08-21 19:03:04
vmware
vmware
kaspersky
kaspersky
KLA10452 Multiple vulnerabilities in VMware products
2015-01-27 00:00:00
rubygems
rubygems
Nokogiri gem contains several vulnerabilities in libxml2
2015-12-14 21:00:00
apple
apple
About the security content of Apple TV 7.2.1
2016-02-25 00:00:00
About the security content of Apple TV 7.2.1 - Apple Support
2017-01-23 03:54:31
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
6.9 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.015 Low
EPSS
Percentile
86.5%
Related for USN-2389-1