Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1376-1
HistoryFeb 27, 2012 - 12:00 a.m.

libxml2 vulnerability

2012-02-2700:00:00
ubuntu.com
50

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.5

Confidence

High

EPSS

0.009

Percentile

82.9%

JSON

Releases

  • Ubuntu 11.10
  • Ubuntu 11.04
  • Ubuntu 10.10
  • Ubuntu 10.04
  • Ubuntu 8.04

Packages

  • libxml2 - GNOME XML library

Details

Juraj Somorovsky discovered that libxml2 was vulnerable to hash table
collisions. If a user or application linked against libxml2 were tricked
into opening a specially crafted XML file, an attacker could cause a
denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibxml2< 2.6.31.dfsg-2ubuntu1.8UNKNOWN
Ubuntu8.04noarchlibxml2-dbg< 2.6.31.dfsg-2ubuntu1.8UNKNOWN
Ubuntu8.04noarchlibxml2-dev< 2.6.31.dfsg-2ubuntu1.8UNKNOWN
Ubuntu8.04noarchlibxml2-udeb< 2.6.31.dfsg-2ubuntu1.8UNKNOWN
Ubuntu8.04noarchlibxml2-utils< 2.6.31.dfsg-2ubuntu1.8UNKNOWN
Ubuntu8.04noarchpython-libxml2< 2.6.31.dfsg-2ubuntu1.8UNKNOWN
Ubuntu8.04noarchpython-libxml2-dbg< 2.6.31.dfsg-2ubuntu1.8UNKNOWN
Ubuntu11.10noarchlibxml2< 2.7.8.dfsg-4ubuntu0.2UNKNOWN
Ubuntu11.10noarchlibxml2-dbg< 2.7.8.dfsg-4ubuntu0.2UNKNOWN
Ubuntu11.10noarchlibxml2-dev< 2.7.8.dfsg-4ubuntu0.2UNKNOWN
Rows per page:
1-10 of 351

Related

redhat 4
cvelist 1
nessus 35
oraclelinux 3
openvas 29
prion 1
ubuntucve 1
veracode 1
debian 1
nvd 1
gentoo 1
cve 1
debiancve 1
centos 2
securityvulns 9
amazon 1
vmware 4
suse 2
fedora 2
oracle 1
tenable 1
redhat
redhat
(RHSA-2012:0324) Moderate: libxml2 security update
2012-02-21 00:00:00
(RHSA-2012:1324) Important: rhev-hypervisor5 security and bug fix update
2012-10-02 00:00:00
(RHSA-2013:0217) Important: mingw32-libxml2 security update
2013-01-31 00:00:00
cvelist
cvelist
CVE-2012-0841
2012-12-21 02:00:00
nessus
nessus
Scientific Linux Security Update : libxml2 on SL5.x, SL6.x i386/x86_64 (20120221)
2012-08-01 00:00:00
RHEL 5 / 6 : libxml2 (RHSA-2012:0324)
2012-02-22 00:00:00
openSUSE Security Update : libxml2 (openSUSE-SU-2012:0342-1)
2014-06-13 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2012-02-21 00:00:00
libxml2 security update
2012-09-18 00:00:00
mingw32-libxml2 security update
2013-01-31 00:00:00
openvas
openvas
RedHat Update for libxml2 RHSA-2012:0324-01
2012-02-27 00:00:00
Ubuntu: Security Advisory (USN-1376-1)
2012-03-07 00:00:00
Amazon Linux: Security Advisory (ALAS-2012-52)
2015-09-08 00:00:00
prion
prion
Code injection
2012-12-21 05:46:00
ubuntucve
ubuntucve
CVE-2012-0841
2012-02-22 00:00:00
veracode
veracode
Denial Of Service (DoS) CPU Consumption
2019-05-02 04:52:19
debian
debian
[SECURITY] [DSA 2417-1] libxml2 security update
2012-02-22 23:05:51
nvd
nvd
CVE-2012-0841
2012-12-21 05:46:14
gentoo
gentoo
libxml2: Denial of service
2012-03-06 00:00:00
cve
cve
CVE-2012-0841
2012-12-21 05:46:14
debiancve
debiancve
CVE-2012-0841
2012-12-21 05:46:14
centos
centos
libxml2 security update
2012-02-22 14:26:48
mingw32 security update
2013-02-01 00:53:30
securityvulns
securityvulns
libxmls library DoS
2012-02-24 00:00:00
[ MDVSA-2012:023 ] libxml2
2012-02-24 00:00:00
Apple iTunes multiple security vulnerabilities
2014-01-29 00:00:00
amazon
amazon
Medium: libxml2
2012-03-04 16:12:00
vmware
vmware
VMware ESXi update to third party library
2012-07-12 00:00:00
VMware ESXi update to third party library
2012-07-12 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
suse
suse
Security update for libxml2 (important)
2013-11-04 17:04:12
Security update for libxml2 (important)
2013-11-04 18:04:12
fedora
fedora
[SECURITY] Fedora 16 Update: libxml2-2.7.8-8.fc16
2012-09-27 04:35:19
[SECURITY] Fedora 17 Update: libxml2-2.7.8-9.fc17
2012-09-26 08:56:06
oracle
oracle
Oracle Critical Patch Update - April 2013
2013-04-16 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.5

Confidence

High

EPSS

0.009

Percentile

82.9%

JSON
Related for USN-1376-1
redhat4cvelist1nessus35oraclelinux3openvas29prion1ubuntucve1veracode1debian1nvd1gentoo1cve1debiancve1centos2securityvulns9amazon1vmware4suse2fedora2oracle1tenable1