Red Hat Security AdvisoryRHSA-2014:1885
libxml2 security update
Released 2014-11-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libxml2-2.6.26-2.1.25.el5_11, libxml2-2.6.26-2.1.25.el5_11.i386, libxml2-2.6.26-2.1.25.el5_11.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxml2-2.6.26-2.1.25.el5_11, libxml2-2.6.26-2.1.25.el5_11.i386, libxml2-python-2.6.26-2.1.25.el5_11 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libxml2-2.6.26-2.1.25.el5_11, libxml2-devel-2.6.26-2.1.25.el5_11, libxml2-devel-2.6.26-2.1.25.el5_11.i386
Fixes 1 record
Priority LOW 29
parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a c…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03782 · Published 2014-11-04 · Fixed
