Red Hat Security AdvisoryRHSA-2008:0886
libxml2 security update
Released 2008-09-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 libxml2-2.4.19-11.ent, libxml2-2.4.19-11.ent.i386, libxml2-2.4.19-11.ent.ia64 +4
- Red Hat Enterprise Linux ES version 2.1 libxml2-2.4.19-11.ent, libxml2-2.4.19-11.ent.i386, libxml2-devel-2.4.19-11.ent.i386 +1
- Red Hat Enterprise Linux WS version 2.1 libxml2-2.4.19-11.ent, libxml2-2.4.19-11.ent.i386, libxml2-devel-2.4.19-11.ent.i386 +1
- Red Hat Linux Advanced Workstation 2.1 libxml2-2.4.19-11.ent, libxml2-2.4.19-11.ent.ia64, libxml2-devel-2.4.19-11.ent.ia64 +1
Fixes 2 records
Priority MEDIUM 63
Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML enti…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.23373 · Published 2008-09-12 · Fixed CWE-119
Priority LOW 32
libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document co…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01619 · Published 2008-09-02 · Fixed CWE-776
