Lucene search

K
ubuntuUbuntuUSN-4991-1
HistoryJun 17, 2021 - 12:00 a.m.

libxml2 vulnerabilities

2021-06-1700:00:00
ubuntu.com
128

8.6 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

Releases

  • Ubuntu 21.04
  • Ubuntu 20.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • libxml2 - GNOME XML library

Details

Yunho Kim discovered that libxml2 incorrectly handled certain error
conditions. A remote attacker could exploit this with a crafted XML file to
cause a denial of service, or possibly cause libxml2 to expose sensitive
information. This issue only affected Ubuntu 14.04 ESM, and Ubuntu 16.04
ESM. (CVE-2017-8872)

Zhipeng Xie discovered that libxml2 incorrectly handled certain XML
schemas. A remote attacker could possibly use this issue to cause a denial
of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM,
and Ubuntu 18.04 LTS. (CVE-2019-20388)

It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A
remote attacker could possibly exploit this with a crafted XML file to
cause libxml2 to crash, resulting in a denial of service. This issue only
affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04
LTS and Ubuntu 20.10. (CVE-2020-24977)

It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A
remote attacker could possibly exploit this with a crafted XML file to
cause libxml2 to crash, resulting in a denial of service. (CVE-2021-3517)

It was discovered that libxml2 did not properly handle certain crafted XML
files. A local attacker could exploit this with a crafted input to cause
libxml2 to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2021-3516, CVE-2021-3518)

It was discovered that libxml2 incorrectly handled error states. A remote
attacker could exploit this with a crafted XML file to cause libxml2 to
crash, resulting in a denial of service. (CVE-2021-3537)

Sebastian Pipping discovered that libxml2 did not properly handle certain
crafted XML files. A remote attacker could exploit this with a crafted XML
file to cause libxml2 to crash, resulting in a denial of service. This
issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04.
(CVE-2021-3541)

OSVersionArchitecturePackageVersionFilename
Ubuntu21.04noarchlibxml2< 2.9.10+dfsg-6.3ubuntu0.1UNKNOWN
Ubuntu21.04noarchlibxml2-dbgsym< 2.9.10+dfsg-6.3ubuntu0.1UNKNOWN
Ubuntu21.04noarchlibxml2-dev< 2.9.10+dfsg-6.3ubuntu0.1UNKNOWN
Ubuntu21.04noarchlibxml2-doc< 2.9.10+dfsg-6.3ubuntu0.1UNKNOWN
Ubuntu21.04noarchlibxml2-utils< 2.9.10+dfsg-6.3ubuntu0.1UNKNOWN
Ubuntu21.04noarchlibxml2-utils-dbgsym< 2.9.10+dfsg-6.3ubuntu0.1UNKNOWN
Ubuntu21.04noarchpython3-libxml2< 2.9.10+dfsg-6.3ubuntu0.1UNKNOWN
Ubuntu21.04noarchpython3-libxml2-dbg< 2.9.10+dfsg-6.3ubuntu0.1UNKNOWN
Ubuntu20.10noarchlibxml2< 2.9.10+dfsg-5ubuntu0.20.10.2UNKNOWN
Ubuntu20.10noarchlibxml2-dbgsym< 2.9.10+dfsg-5ubuntu0.20.10.2UNKNOWN
Rows per page:
1-10 of 691