Test ID:	1.3.6.1.4.1.25623.1.1.1.2.2015.355
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-355-1)
Summary:	The remote host is missing an update for the Debian 'libxml2' package(s) announced via the DLA-355-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'libxml2' package(s) announced via the DLA-355-1 advisory. Vulnerability Insight: CVE-2015-8241 Buffer overread with XML parser in xmlNextChar CVE-2015-8317 issues in the xmlParseXMLDecl function: If we fail conversing the current input stream while processing the encoding declaration of the XMLDecl then it's safer to just abort there and not try to report further errors. If the string is not properly terminated do not try to convert to the given encoding. Additional fix for off by one error in previous patch for CVE-2015-7942 (thanks to Salvatore for spotting this) Affected Software/OS: 'libxml2' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8241 BugTraq ID: 77621 http://www.securityfocus.com/bid/77621 Debian Security Information: DSA-3430 (Google Search) http://www.debian.org/security/2015/dsa-3430 HPdes Security Advisory: HPSBGN03537 http://marc.info/?l=bugtraq&m=145382616617563&w=2 http://www.openwall.com/lists/oss-security/2015/11/17/5 http://www.openwall.com/lists/oss-security/2015/11/18/23 RedHat Security Advisories: RHSA-2015:2549 http://rhn.redhat.com/errata/RHSA-2015-2549.html RedHat Security Advisories: RHSA-2015:2550 http://rhn.redhat.com/errata/RHSA-2015-2550.html RedHat Security Advisories: RHSA-2016:1089 http://rhn.redhat.com/errata/RHSA-2016-1089.html http://www.securitytracker.com/id/1034243 SuSE Security Announcement: openSUSE-SU-2015:2372 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html SuSE Security Announcement: openSUSE-SU-2016:0106 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html http://www.ubuntu.com/usn/USN-2834-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-8317 http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html BugTraq ID: 77681 http://www.securityfocus.com/bid/77681 BugTraq ID: 91826 http://www.securityfocus.com/bid/91826 https://blog.fuzzing-project.org/28-Libxml2-Several-out-of-bounds-reads.html http://www.openwall.com/lists/oss-security/2015/11/21/1 http://www.openwall.com/lists/oss-security/2015/11/22/3
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.