Lucene search
ChromeCVE-2013-2877HistoryJul 10, 2013 - 10:55 a.m.
CVE-2013-2877
2013-07-1010:55:02
CWE-119
Chrome
web.nvd.nist.gov
91
cve-2013-2877
libxml2
denial of service
out-of-bounds read
xml_parser_eof
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.6
Confidence
High
EPSS
0.046
Percentile
92.6%
parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.
Affected configurations
Node
googlechromeRange≤28.0.1500.70
ORgooglechromeMatch28.0.1500.0
ORgooglechromeMatch28.0.1500.2
ORgooglechromeMatch28.0.1500.3
ORgooglechromeMatch28.0.1500.4
ORgooglechromeMatch28.0.1500.5
ORgooglechromeMatch28.0.1500.6
ORgooglechromeMatch28.0.1500.8
ORgooglechromeMatch28.0.1500.9
ORgooglechromeMatch28.0.1500.10
ORgooglechromeMatch28.0.1500.11
ORgooglechromeMatch28.0.1500.12
ORgooglechromeMatch28.0.1500.13
ORgooglechromeMatch28.0.1500.14
ORgooglechromeMatch28.0.1500.15
ORgooglechromeMatch28.0.1500.16
ORgooglechromeMatch28.0.1500.17
ORgooglechromeMatch28.0.1500.18
ORgooglechromeMatch28.0.1500.19
ORgooglechromeMatch28.0.1500.20
ORgooglechromeMatch28.0.1500.21
ORgooglechromeMatch28.0.1500.22
ORgooglechromeMatch28.0.1500.23
ORgooglechromeMatch28.0.1500.24
ORgooglechromeMatch28.0.1500.25
ORgooglechromeMatch28.0.1500.26
ORgooglechromeMatch28.0.1500.27
ORgooglechromeMatch28.0.1500.28
ORgooglechromeMatch28.0.1500.29
ORgooglechromeMatch28.0.1500.31
ORgooglechromeMatch28.0.1500.32
ORgooglechromeMatch28.0.1500.33
ORgooglechromeMatch28.0.1500.34
ORgooglechromeMatch28.0.1500.35
ORgooglechromeMatch28.0.1500.36
ORgooglechromeMatch28.0.1500.37
ORgooglechromeMatch28.0.1500.38
ORgooglechromeMatch28.0.1500.39
ORgooglechromeMatch28.0.1500.40
ORgooglechromeMatch28.0.1500.41
ORgooglechromeMatch28.0.1500.42
ORgooglechromeMatch28.0.1500.43
ORgooglechromeMatch28.0.1500.44
ORgooglechromeMatch28.0.1500.45
ORgooglechromeMatch28.0.1500.46
ORgooglechromeMatch28.0.1500.47
ORgooglechromeMatch28.0.1500.48
ORgooglechromeMatch28.0.1500.49
ORgooglechromeMatch28.0.1500.50
ORgooglechromeMatch28.0.1500.51
ORgooglechromeMatch28.0.1500.52
ORgooglechromeMatch28.0.1500.53
ORgooglechromeMatch28.0.1500.54
ORgooglechromeMatch28.0.1500.56
ORgooglechromeMatch28.0.1500.58
ORgooglechromeMatch28.0.1500.59
ORgooglechromeMatch28.0.1500.60
ORgooglechromeMatch28.0.1500.61
ORgooglechromeMatch28.0.1500.62
ORgooglechromeMatch28.0.1500.63
ORgooglechromeMatch28.0.1500.64
ORgooglechromeMatch28.0.1500.66
ORgooglechromeMatch28.0.1500.68
ORxmlsoftlibxml2Range≤2.9.0rc1
ORxmlsoftlibxml2Match1.7.0
ORxmlsoftlibxml2Match1.7.1
ORxmlsoftlibxml2Match1.7.2
ORxmlsoftlibxml2Match1.7.3
ORxmlsoftlibxml2Match1.7.4
ORxmlsoftlibxml2Match1.8.0
ORxmlsoftlibxml2Match1.8.1
ORxmlsoftlibxml2Match1.8.2
ORxmlsoftlibxml2Match1.8.3
ORxmlsoftlibxml2Match1.8.4
ORxmlsoftlibxml2Match1.8.5
ORxmlsoftlibxml2Match1.8.6
ORxmlsoftlibxml2Match1.8.7
ORxmlsoftlibxml2Match1.8.9
ORxmlsoftlibxml2Match1.8.10
ORxmlsoftlibxml2Match1.8.13
ORxmlsoftlibxml2Match1.8.14
ORxmlsoftlibxml2Match1.8.16
ORxmlsoftlibxml2Match2.0.0
ORxmlsoftlibxml2Match2.1.0
ORxmlsoftlibxml2Match2.1.1
ORxmlsoftlibxml2Match2.2.0
ORxmlsoftlibxml2Match2.2.0beta
ORxmlsoftlibxml2Match2.2.1
ORxmlsoftlibxml2Match2.2.2
ORxmlsoftlibxml2Match2.2.3
ORxmlsoftlibxml2Match2.2.4
ORxmlsoftlibxml2Match2.2.5
ORxmlsoftlibxml2Match2.2.6
ORxmlsoftlibxml2Match2.2.7
ORxmlsoftlibxml2Match2.2.8
ORxmlsoftlibxml2Match2.2.9
ORxmlsoftlibxml2Match2.2.10
ORxmlsoftlibxml2Match2.2.11
ORxmlsoftlibxml2Match2.3.0
ORxmlsoftlibxml2Match2.3.1
ORxmlsoftlibxml2Match2.3.2
ORxmlsoftlibxml2Match2.3.3
ORxmlsoftlibxml2Match2.3.4
ORxmlsoftlibxml2Match2.3.5
ORxmlsoftlibxml2Match2.3.6
ORxmlsoftlibxml2Match2.3.7
ORxmlsoftlibxml2Match2.3.8
ORxmlsoftlibxml2Match2.3.9
ORxmlsoftlibxml2Match2.3.10
ORxmlsoftlibxml2Match2.3.11
ORxmlsoftlibxml2Match2.3.12
ORxmlsoftlibxml2Match2.3.13
ORxmlsoftlibxml2Match2.3.14
ORxmlsoftlibxml2Match2.4.1
ORxmlsoftlibxml2Match2.4.2
ORxmlsoftlibxml2Match2.4.3
ORxmlsoftlibxml2Match2.4.4
ORxmlsoftlibxml2Match2.4.5
ORxmlsoftlibxml2Match2.4.6
ORxmlsoftlibxml2Match2.4.7
ORxmlsoftlibxml2Match2.4.8
ORxmlsoftlibxml2Match2.4.9
ORxmlsoftlibxml2Match2.4.10
ORxmlsoftlibxml2Match2.4.11
ORxmlsoftlibxml2Match2.4.12
ORxmlsoftlibxml2Match2.4.13
ORxmlsoftlibxml2Match2.4.14
ORxmlsoftlibxml2Match2.4.15
ORxmlsoftlibxml2Match2.4.16
ORxmlsoftlibxml2Match2.4.17
ORxmlsoftlibxml2Match2.4.18
ORxmlsoftlibxml2Match2.4.19
ORxmlsoftlibxml2Match2.4.20
ORxmlsoftlibxml2Match2.4.21
ORxmlsoftlibxml2Match2.4.22
ORxmlsoftlibxml2Match2.4.23
ORxmlsoftlibxml2Match2.4.24
ORxmlsoftlibxml2Match2.4.25
ORxmlsoftlibxml2Match2.4.26
ORxmlsoftlibxml2Match2.4.27
ORxmlsoftlibxml2Match2.4.28
ORxmlsoftlibxml2Match2.4.29
ORxmlsoftlibxml2Match2.4.30
ORxmlsoftlibxml2Match2.5.0
ORxmlsoftlibxml2Match2.5.4
ORxmlsoftlibxml2Match2.5.7
ORxmlsoftlibxml2Match2.5.8
ORxmlsoftlibxml2Match2.5.10
ORxmlsoftlibxml2Match2.5.11
ORxmlsoftlibxml2Match2.6.0
ORxmlsoftlibxml2Match2.6.1
ORxmlsoftlibxml2Match2.6.2
ORxmlsoftlibxml2Match2.6.3
ORxmlsoftlibxml2Match2.6.4
ORxmlsoftlibxml2Match2.6.5
ORxmlsoftlibxml2Match2.6.6
ORxmlsoftlibxml2Match2.6.7
ORxmlsoftlibxml2Match2.6.8
ORxmlsoftlibxml2Match2.6.9
ORxmlsoftlibxml2Match2.6.11
ORxmlsoftlibxml2Match2.6.12
ORxmlsoftlibxml2Match2.6.13
ORxmlsoftlibxml2Match2.6.14
ORxmlsoftlibxml2Match2.6.16
ORxmlsoftlibxml2Match2.6.17
ORxmlsoftlibxml2Match2.6.18
ORxmlsoftlibxml2Match2.6.20
ORxmlsoftlibxml2Match2.6.21
ORxmlsoftlibxml2Match2.6.22
ORxmlsoftlibxml2Match2.6.23
ORxmlsoftlibxml2Match2.6.24
ORxmlsoftlibxml2Match2.6.25
ORxmlsoftlibxml2Match2.6.26
ORxmlsoftlibxml2Match2.6.27
ORxmlsoftlibxml2Match2.6.28
ORxmlsoftlibxml2Match2.6.29
ORxmlsoftlibxml2Match2.6.30
ORxmlsoftlibxml2Match2.6.31
ORxmlsoftlibxml2Match2.6.32
ORxmlsoftlibxml2Match2.7.0
ORxmlsoftlibxml2Match2.7.1
ORxmlsoftlibxml2Match2.7.2
ORxmlsoftlibxml2Match2.7.3
ORxmlsoftlibxml2Match2.7.4
ORxmlsoftlibxml2Match2.7.5
ORxmlsoftlibxml2Match2.7.6
ORxmlsoftlibxml2Match2.7.7
ORxmlsoftlibxml2Match2.7.8
ORxmlsoftlibxml2Match2.8.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chrome | * | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
| chrome | 28.0.1500.0 | cpe:2.3:a:google:chrome:28.0.1500.0:*:*:*:*:*:*:* | |
| chrome | 28.0.1500.2 | cpe:2.3:a:google:chrome:28.0.1500.2:*:*:*:*:*:*:* | |
| chrome | 28.0.1500.3 | cpe:2.3:a:google:chrome:28.0.1500.3:*:*:*:*:*:*:* | |
| chrome | 28.0.1500.4 | cpe:2.3:a:google:chrome:28.0.1500.4:*:*:*:*:*:*:* | |
| chrome | 28.0.1500.5 | cpe:2.3:a:google:chrome:28.0.1500.5:*:*:*:*:*:*:* | |
| chrome | 28.0.1500.6 | cpe:2.3:a:google:chrome:28.0.1500.6:*:*:*:*:*:*:* | |
| chrome | 28.0.1500.8 | cpe:2.3:a:google:chrome:28.0.1500.8:*:*:*:*:*:*:* | |
| chrome | 28.0.1500.9 | cpe:2.3:a:google:chrome:28.0.1500.9:*:*:*:*:*:*:* | |
| chrome | 28.0.1500.10 | cpe:2.3:a:google:chrome:28.0.1500.10:*:*:*:*:*:*:* |
References
ftp://xmlsoft.org/libxml2/libxml2-2.9.0.tar.gz
git.chromium.org/gitweb/?p=chromium/chromium.git%3Ba=commit%3Bh=e5d7f7e5dc21d3ae7be3cbb949ac4d8701e06de1
googlechromereleases.blogspot.com/2013/07/stable-channel-update.html
lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
lists.opensuse.org/opensuse-updates/2013-07/msg00063.html
lists.opensuse.org/opensuse-updates/2013-07/msg00077.html
seclists.org/fulldisclosure/2014/Dec/23
secunia.com/advisories/54172
secunia.com/advisories/55568
www.debian.org/security/2013/dsa-2724
www.debian.org/security/2013/dsa-2779
www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
www.securityfocus.com/archive/1/534161/100/0/threaded
www.securityfocus.com/bid/61050
www.ubuntu.com/usn/USN-1904-1
www.ubuntu.com/usn/USN-1904-2
www.vmware.com/security/advisories/VMSA-2014-0012.html
code.google.com/p/chromium/issues/detail?id=229019
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0218)
2022-01-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-340)
2015-09-08 00:00:00
Debian Security Advisory DSA 2779-1 (libxml2 - denial of service)
2013-10-13 00:00:00
nessus
nessus
SuSE 11.2 / 11.3 Security Update : libxml2 (SAT Patch Numbers 8713 / 8714)
2014-01-29 00:00:00
Amazon Linux AMI : libxml2 (ALAS-2014-340)
2014-10-12 00:00:00
Debian DSA-2779-1 : libxml2 - denial of service
2013-10-15 00:00:00
securityvulns
securityvulns
libxml2 DoS
2013-07-15 00:00:00
NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities
2014-12-11 00:00:00
[SECURITY] [DSA 2724-1] chromium-browser security update
2013-07-19 00:00:00
mageia
mageia
Updated libxml2 packages fix CVE-2013-2877
2013-07-21 12:41:56
debian
debian
[SECURITY] [DSA 2779-1] libxml2 security update
2013-10-13 21:02:25
[SECURITY] [DSA 2779-1] libxml2 security update
2013-10-13 21:02:25
[SECURITY] [DSA 2724-1] chromium-browser security update
2013-07-18 21:59:40
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:01:56
nvd
nvd
CVE-2013-2877
2013-07-10 10:55:02
CVE-2015-0386
2015-01-21 18:59:30
ubuntucve
ubuntucve
CVE-2013-2877
2013-07-10 00:00:00
cvelist
cvelist
CVE-2013-2877
2013-07-10 10:00:00
CVE-2015-0386
2015-01-21 18:00:00
prion
prion
Out-of-bounds
2013-07-10 10:55:00
Design/Logic Flaw
2015-01-21 18:59:00
amazon
amazon
Low: libxml2
2014-05-21 10:29:00
freebsd
freebsd
libxml2 -- lack of end-of-document check DoS
2013-04-11 00:00:00
chromium -- multiple vulnerabilities
2013-07-09 00:00:00
debiancve
debiancve
CVE-2013-2877
2013-07-10 10:55:02
ubuntu
ubuntu
libxml2 vulnerabilities
2013-07-15 00:00:00
libxml2 regression
2013-07-17 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2014-05-19 00:00:00
centos
centos
libxml2 security update
2014-05-19 13:08:11
redhat
redhat
(RHSA-2014:0513) Moderate: libxml2 security update
2014-05-19 00:00:00
ibm
ibm
cve
cve
CVE-2015-0386
2015-01-21 18:59:30
gentoo
gentoo
libxml2: Multiple vulnerabilities
2013-11-10 00:00:00
AMD64 x86 emulation base libraries: Multiple vulnerabilities
2014-12-12 00:00:00
Chromium, V8: Multiple vulnerabilities
2013-09-24 00:00:00
suse
suse
Security update for libxml2 (important)
2013-11-04 17:04:12
Security update for libxml2 (important)
2013-11-04 18:04:12
vmware
vmware
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
threatpost
threatpost
Google Fixes 17 Flaws in Chrome 28
2013-07-10 09:37:49
osv
osv
chromium-browser - several
2013-07-17 00:00:00
ruby2.2-rubygem-nokogiri-1.6.8.1-1.3 on GA media
2024-06-15 00:00:00
CVE-2016-9597
2018-07-30 14:29:02
chrome
chrome
Stable Channel Update
2013-07-09 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.6
Confidence
High
EPSS
0.046
Percentile
92.6%
Related for CVE-2013-2877