Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5354
HistoryNov 01, 2017 - 5:30 a.m.

Vulnerability Through C Libraries

2017-11-0105:30:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

chef uses vulnerable versions of LibXML2, OpenSSL and LibXSLT. These vulnerabilities are included due to the omnibus_override file using the vulnerable versions. LibXML2 is vulnerable to the following CVEs: CVE-2017-9050, CVE-2017-9049, CVE-2017-9048, CVE-2017-9047, CVE-2017-8872, and CVE-2016-9318. OpenSSL is vulnerable to the following CVEs: CVE-2017-3731, CVE-2017-3732, and CVE-2016-7055. LibXLST contains a memory handling vulnerability.