Description
libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Apple / iphone_os1.0.0 – 3.0
- Apple / Safari4.0
- Canonical / Ubuntu Linux8.04 – 8.04
- Canonical / Ubuntu Linux7.04 – 7.04
- Canonical / Ubuntu Linux7.10 – 7.10
- Canonical / Ubuntu Linux6.06 – 6.06
- Debian / debian_linux4.0 – 4.0
- fedoraproject / fedora9 – 9
- RedHat / enterprise_linux_desktop4.0 – 4.0
- RedHat / enterprise_linux_desktop3.0 – 3.0
- RedHat / enterprise_linux_desktop5.0 – 5.0
- RedHat / enterprise_linux_eus4.7 – 4.7
- RedHat / enterprise_linux_eus5.2 – 5.2
- RedHat / enterprise_linux_server4.0 – 4.0
- RedHat / enterprise_linux_server2.0 – 2.0
- RedHat / enterprise_linux_server3.0 – 3.0
- RedHat / enterprise_linux_server5.0 – 5.0
- RedHat / enterprise_linux_workstation4.0 – 4.0
- RedHat / enterprise_linux_workstation2.0 – 2.0
- RedHat / enterprise_linux_workstation3.0 – 3.0
- RedHat / enterprise_linux_workstation5.0 – 5.0
- VMware / esx3.0.3 – 3.0.3
- VMware / esx2.5.4 – 2.5.4
- VMware / esx2.5.5 – 2.5.5
- VMware / esx3.0.2 – 3.0.2
- xmlsoft / libxml22.6.32
References
- VENDOR_ADVISORYhttps://usn.ubuntu.com/644-1/
- VENDOR_ADVISORYhttp://support.apple.com/kb/HT3639
- VENDOR_ADVISORYhttp://secunia.com/advisories/31855
- MISChttp://www.securitytracker.com/id?1020728
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2009/1621
- MISChttps://www.redhat.com/archives/fedora-package-announce/2008-September/msg00347.html
- MISChttps://rhn.redhat.com/errata/RHSA-2008-0836.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/32807
- MAILING_LISThttp://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/31982
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/2971
- VENDOR_ADVISORYhttp://www.vmware.com/security/advisories/VMSA-2008-0017.html
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/2843
- MISChttp://xmlsoft.org/news.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/31590
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2009/1522
- MISChttp://www.securityfocus.com/archive/1/497962/100/0/threaded
- VENDOR_ADVISORYhttp://www.ubuntu.com/usn/usn-640-1
- VENDOR_ADVISORYhttp://secunia.com/advisories/31728
- MISChttp://security.gentoo.org/glsa/glsa-200812-06.xml
- MAILING_LISThttp://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/32488
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/31566
- MISChttp://www.securityfocus.com/bid/30783
- VENDOR_ADVISORYhttp://wiki.rpath.com/Advisories:rPSA-2008-0325
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/2419
- VENDOR_ADVISORYhttp://secunia.com/advisories/35379
- VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:192
- VENDOR_ADVISORYhttp://secunia.com/advisories/32974
- MISChttp://svn.gnome.org/viewvc/libxml2?view=revision&revision=3772
- MISChttps://www.redhat.com/archives/fedora-package-announce/2008-September/msg00261.html
- VENDOR_ADVISORYhttp://www.debian.org/security/2008/dsa-1631
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=458086
- MISChttp://mail.gnome.org/archives/xml/2008-August/msg00034.html
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9812
- VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:180
- VENDOR_ADVISORYhttp://secunia.com/advisories/31558
- VENDOR_ADVISORYhttp://support.apple.com/kb/HT3613
- MAILING_LISThttp://lists.vmware.com/pipermail/security-announce/2008/000039.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/31748