Red Hat Security AdvisoryRHSA-2011:1749
libxml2 security and bug fix update
Released 2011-12-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libxml2-2.7.6-4.el6, libxml2-python-2.7.6-4.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) libxml2-2.7.6-4.el6, libxml2-devel-2.7.6-4.el6, libxml2-static-2.7.6-4.el6
- Red Hat Enterprise Linux HPC Node (v. 6) libxml2-2.7.6-4.el6, libxml2-python-2.7.6-4.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libxml2-2.7.6-4.el6, libxml2-devel-2.7.6-4.el6, libxml2-static-2.7.6-4.el6
- Red Hat Enterprise Linux Server (v. 6) libxml2-2.7.6-4.el6, libxml2-2.7.6-4.el6.ppc, libxml2-devel-2.7.6-4.el6 +2
- Red Hat Enterprise Linux Server Optional (v. 6) libxml2-2.7.6-4.el6, libxml2-static-2.7.6-4.el6
- Red Hat Enterprise Linux Workstation (v. 6) libxml2-2.7.6-4.el6, libxml2-devel-2.7.6-4.el6, libxml2-python-2.7.6-4.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) libxml2-2.7.6-4.el6, libxml2-static-2.7.6-4.el6
Fixes 6 records
Priority MEDIUM 55
Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary c…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13432 · Published 2011-09-02 · Partial fix CWE-189
Priority MEDIUM 48
Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04994 · Published 2011-07-21 · Fixed CWE-189
Priority MEDIUM 42
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impac…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05932 · Published 2010-12-07 · Fixed CWE-415
Priority LOW 36
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01693 · Published 2011-08-29 · Fixed CWE-415
Priority LOW 34
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02045 · Published 2011-09-17 · Fixed CWE-415
Priority LOW 25
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows con…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02703 · Published 2010-11-16 · Fixed CWE-119
THREATIST.IORead the docs