Vulnerable Through Use Of C Library

🗓️ 12 Apr 2017 01:37:48Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 54 Views

Nokogiri software vulnerability due to libxml2 C library

Reporter	Title	Published	Views	Family All 308
IBM Security Bulletins	Security Bulletin: A vulnerability in libxml2 affects IBM Flex System Manager (FSM) (CVE-2016-9318)	18 Jun 201801:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM RackSwitch Networking products	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM RackSwitch firmware products are affected by vulnerabilities in Libxml2	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Open Source XMLsoft Libxml2 Vulnerabilities (CVE-2016-3627)	16 Jun 201821:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in libxml2 (CVE-2016-9318 CVE-2016-9597)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Open Source XMLsoft Libxml2 Vulnerabilities (CVE-2016-4483)	16 Jun 201821:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libxml2 affect IBM Security Identity Governance	16 Jun 201821:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in XML processing affect IBM DataPower Gateways	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in XMLsoft Libxml2 affect IBM Streams	16 Jun 201814:17	–	ibm

Vulners

Node

nokogiri nokogiriRange≤1.6.8.rc3

-libxml2.soRange≤2.9.3

libxml2Range≤2.7.8.7

Source	Link
securitytracker	www.securitytracker.com/id/1036348
securityfocus	www.securityfocus.com/bid/90013
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
debian	www.debian.org/security/2016/dsa-3593
security	www.security.gentoo.org/glsa/201701-37
tenable	www.tenable.com/security/tns-2016-18
oracle	www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.gnome.org/browse/libxml2/commit/

31 May 2021 14:59Current

7High risk

Vulners AI Score7

CVSS 25

CVSS 3.17.5

EPSS0.0127