Lucene search

K
ubuntuUbuntuUSN-1153-1
HistoryJun 16, 2011 - 12:00 a.m.

libxml2 vulnerability

2011-06-1600:00:00
ubuntu.com
72

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.7

Confidence

High

EPSS

0.007

Percentile

80.6%

Releases

  • Ubuntu 11.04
  • Ubuntu 10.10
  • Ubuntu 10.04
  • Ubuntu 8.04

Packages

  • libxml2 - GNOME XML library

Details

Chris Evans discovered that libxml2 incorrectly handled memory allocation.
If an application using libxml2 opened a specially crafted XML file, an
attacker could cause a denial of service or possibly execute code as the
user invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibxml2< 2.6.31.dfsg-2ubuntu1.6UNKNOWN
Ubuntu8.04noarchlibxml2-dbg< 2.6.31.dfsg-2ubuntu1.6UNKNOWN
Ubuntu8.04noarchlibxml2-dev< 2.6.31.dfsg-2ubuntu1.6UNKNOWN
Ubuntu8.04noarchlibxml2-udeb< 2.6.31.dfsg-2ubuntu1.6UNKNOWN
Ubuntu8.04noarchlibxml2-utils< 2.6.31.dfsg-2ubuntu1.6UNKNOWN
Ubuntu8.04noarchpython-libxml2< 2.6.31.dfsg-2ubuntu1.6UNKNOWN
Ubuntu8.04noarchpython-libxml2-dbg< 2.6.31.dfsg-2ubuntu1.6UNKNOWN
Ubuntu11.04noarchlibxml2< 2.7.8.dfsg-2ubuntu0.1UNKNOWN
Ubuntu11.04noarchlibxml2-dbg< 2.7.8.dfsg-2ubuntu0.1UNKNOWN
Ubuntu11.04noarchlibxml2-dev< 2.7.8.dfsg-2ubuntu0.1UNKNOWN
Rows per page:
1-10 of 281

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.7

Confidence

High

EPSS

0.007

Percentile

80.6%