Lucene search

K
ubuntuUbuntuUSN-3235-1
HistoryMar 16, 2017 - 12:00 a.m.

libxml2 vulnerabilities

2017-03-1600:00:00
ubuntu.com
69

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.106

Percentile

95.1%

Releases

  • Ubuntu 16.10
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • libxml2 - GNOME XML library

Details

It was discovered that libxml2 incorrectly handled format strings. If a
user or automated system were tricked into opening a specially crafted
document, an attacker could possibly cause libxml2 to crash, resulting in a
denial of service. This issue only affected Ubuntu 12.04 LTS, Ubuntu 14.04
LTS, and Ubuntu 16.04 LTS. (CVE-2016-4448)

It was discovered that libxml2 incorrectly handled certain malformed
documents. If a user or automated system were tricked into opening a
specially crafted document, an attacker could cause libxml2 to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2016-4658)

Nick Wellnhofer discovered that libxml2 incorrectly handled certain
malformed documents. If a user or automated system were tricked into
opening a specially crafted document, an attacker could cause libxml2 to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2016-5131)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.10noarchlibxml2< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibxml2-dbg< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibxml2-dbgsym< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibxml2-dev< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibxml2-dev-dbgsym< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibxml2-doc< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibxml2-udeb< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibxml2-udeb-dbgsym< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibxml2-utils< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Ubuntu16.10noarchlibxml2-utils-dbg< 2.9.4+dfsg1-2ubuntu0.1UNKNOWN
Rows per page:
1-10 of 521

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.106

Percentile

95.1%