Lucene search
UbuntuUSN-855-1HistoryNov 05, 2009 - 12:00 a.m.
libhtml-parser-perl vulnerability
2009-11-0500:00:00
ubuntu.com
38
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.7%
Releases
- Ubuntu 9.10
- Ubuntu 9.04
- Ubuntu 8.10
- Ubuntu 8.04
- Ubuntu 6.06
Packages
- libhtml-parser-perl -
Details
Mark Martinec discovered that HTML::Parser incorrectly handled strings
with incomplete entities. An attacker could send specially crafted input to
applications that use HTML::Parser and cause a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 9.10 | noarch | libhtml-parser-perl | < 3.61-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libhtml-parser-perl | < 3.59-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libhtml-parser-perl | < 3.56-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libhtml-parser-perl | < 3.56-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 6.06 | noarch | libhtml-parser-perl | < 3.48-1ubuntu0.1 | UNKNOWN |
References
Related
nessus
nessus
Debian DSA-1923-1 : libhtml-parser-perl - denial of service
2010-02-24 00:00:00
openSUSE Security Update : perl-HTML-Parser (perl-HTML-Parser-1491)
2009-12-09 00:00:00
openSUSE Security Update : perl-HTML-Parser (perl-HTML-Parser-1491)
2009-12-09 00:00:00
ubuntucve
ubuntucve
CVE-2009-3627
2009-10-29 00:00:00
securityvulns
securityvulns
libhtml-parser-perl library DoS
2009-10-30 00:00:00
debiancve
debiancve
CVE-2009-3627
2009-10-29 14:30:01
openvas
openvas
HTML-Parser 'decode_entities()' Denial of Service Vulnerability
2009-11-09 00:00:00
Debian: Security Advisory (DSA-1923-1)
2009-11-11 00:00:00
HTML-Parser 'decode_entities()' Denial of Service Vulnerability
2009-11-09 00:00:00
seebug
seebug
libhtml-parser-perl vulnerability USN-855-1
2009-11-07 00:00:00
prion
prion
Design/Logic Flaw
2009-10-29 14:30:00
debian
debian
freebsd
freebsd
p5-HTML-Parser -- denial of service
2009-10-23 00:00:00
nvd
nvd
CVE-2009-3627
2009-10-29 14:30:01
cve
cve
CVE-2009-3627
2009-10-29 14:30:01
cvelist
cvelist
CVE-2009-3627
2009-10-29 14:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.7%
Related for USN-855-1