Red Hat Security AdvisoryRHSA-2012:0016
libxml2 security update
Released 2012-01-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 libxml2-2.6.16-12.9, libxml2-2.6.16-12.9.i386, libxml2-2.6.16-12.9.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 libxml2-2.6.16-12.9, libxml2-2.6.16-12.9.i386, libxml2-devel-2.6.16-12.9 +3
- Red Hat Enterprise Linux ES version 4 libxml2-2.6.16-12.9, libxml2-2.6.16-12.9.i386, libxml2-2.6.16-12.9.ia64 +6
- Red Hat Enterprise Linux WS version 4 libxml2-2.6.16-12.9, libxml2-2.6.16-12.9.i386, libxml2-2.6.16-12.9.ia64 +6
Fixes 4 records
Priority MEDIUM 48
Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04994 · Published 2011-07-21 · Fixed CWE-189
Priority LOW 38
Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02476 · Published 2012-01-07 · Fixed CWE-787
Priority LOW 34
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02045 · Published 2011-09-17 · Fixed CWE-415
Priority LOW 26
libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01599 · Published 2011-12-13 · Fixed CWE-125
THREATIST.IORead the docs