Test ID:	1.3.6.1.4.1.25623.1.0.140193
Category:	F5 Local Security Checks
Title:	F5 BIG-IP - libxml2 vulnerability CVE-2015-8806
Summary:	dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the '
Description:	Summary: dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the ' Vulnerability Impact: This vulnerability allows disruption of service. Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8806 BugTraq ID: 82071 http://www.securityfocus.com/bid/82071 Debian Security Information: DSA-3593 (Google Search) https://www.debian.org/security/2016/dsa-3593 https://security.gentoo.org/glsa/201701-37 https://bugzilla.gnome.org/show_bug.cgi?id=749115 http://www.openwall.com/lists/oss-security/2016/02/03/5 http://www.ubuntu.com/usn/USN-2994-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-9244 BugTraq ID: 96143 http://www.securityfocus.com/bid/96143 https://www.exploit-db.com/exploits/41298/ http://packetstormsecurity.com/files/141017/Ticketbleed-F5-TLS-Information-Disclosure.html https://blog.filippo.io/finding-ticketbleed/ https://filippo.io/Ticketbleed/ https://github.com/0x00string/oldays/blob/master/CVE-2016-9244.py http://www.securitytracker.com/id/1037800
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.