Lucene search

K
debianDebianDEBIAN:DSA-2580-1:CEB88
HistoryDec 02, 2012 - 8:54 p.m.

[SECURITY] [DSA 2580-1] libxml security update

2012-12-0220:54:41
lists.debian.org
15

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.8 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.4%


Debian Security Advisory DSA-2580-1 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
December 02, 2012 http://www.debian.org/security/faq


Package : libxml2
Vulnerability : buffer overflow
Problem type : local(remote)
Debian-specific: no
CVE ID : CVE-2012-5134

Jueri Aedla discovered a buffer overflow in the libxml XML library, which
could result in the execution of arbitrary code.

For the stable distribution (squeeze), this problem has been fixed in
version 2.7.8.dfsg-2+squeeze6.

For the unstable distribution (sid), this problem has been fixed in
version 2.8.0+dfsg1-7.

We recommend that you upgrade your libxml2 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.8 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.4%