Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2019.0047
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2019-0047)
Zusammenfassung:	The remote host is missing an update for the 'libxml2, perl-XML-LibXML' package(s) announced via the MGASA-2019-0047 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libxml2, perl-XML-LibXML' package(s) announced via the MGASA-2019-0047 advisory. Vulnerability Insight: A flaw was found in libxml2 2.9.8. The xz_decomp function in xzlib.c, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (CVE-2018-9251, CVE-2018-14567). A null pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 when parsing invalid XPath expression. Applications processing untrusted XSL format inputs with the use of libxml2 library may be vulnerable to denial of service attack due to crash of the application (CVE-2018-14404). The libxml2 package has been updated to version 2.9.9 to fix these issues and other bugs. The perl-XML-LibXML package has been rebuilt against the updated libxml2. Affected Software/OS: 'libxml2, perl-XML-LibXML' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-14404 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901817 https://bugzilla.redhat.com/show_bug.cgi?id=1595985 https://gitlab.gnome.org/GNOME/libxml2/issues/10 https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html RedHat Security Advisories: RHSA-2019:1543 https://access.redhat.com/errata/RHSA-2019:1543 https://usn.ubuntu.com/3739-1/ https://usn.ubuntu.com/3739-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-14567 BugTraq ID: 105198 http://www.securityfocus.com/bid/105198 Common Vulnerability Exposure (CVE) ID: CVE-2018-9251 https://bugzilla.gnome.org/show_bug.cgi?id=794914
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.