libxml2: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2014-3660

  parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disa…

  libxml2 libxml2 Debian Ubuntu
  Nov 4, 2014

Revision history

1. 2025-06-30 #20

   Neue Updates von Dell aufgenommen

2. 2025-03-20 #19

   Neue Updates von Oracle Linux aufgenommen

3. 2024-12-03 #18

   Neue Updates von Dell aufgenommen

4. 2024-11-10 #17

   Neue Updates von Dell aufgenommen

5. 2016-01-24 #16

   New remediations available

6. 2015-03-29 #15

   New remediations available

7. 2015-01-05 #13

   New remediations available

8. 2015-01-05 #14

   Version nicht vorhanden

9. 2014-12-08 #11

   New remediations available

10. 2014-12-08 #12

    Version nicht vorhanden

11. 2014-11-20 #8

    New remediations available

12. 2014-11-20 #9

    Version nicht vorhanden

13. 2014-11-20 #10

    Version nicht vorhanden

14. 2014-10-27 #6

    New remediations available

15. 2014-10-27 #7

    Version nicht vorhanden

16. 2014-10-26 #4

    New remediations available

17. 2014-10-26 #5

    Version nicht vorhanden

18. 2014-10-23 #3

    New remediations available

19. 2014-10-16 #1

    Initial Release

20. 2014-10-16 #2

    Version nicht vorhanden

References

• Red Hat Security Advisory RHSA-2014:1655 vom 2014-10-16
  https://rhn.redhat.com/errata/RHSA-2014-1655.html
• Mandriva Security Advisory MDVSA-2014:204 vom 2014-10-23
  http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2014%3A204/
• Debian Security Advisory DSA-3057-1 vom 2014-10-26
  https://lists.debian.org/debian-security-announce/2014/msg00244.html
• Ubuntu Security Notice USN-2389-1 vom 2014-10-27
  http://www.ubuntu.com/usn/usn-2389-1/
• Red Hat Security Advisory RHSA-2014:1885-1 vom 2014-11-20
  http://rhn.redhat.com/errata/RHSA-2014-1885.html
• CESA-2014:1885 Moderate CentOS 5 libxml2 Security Update vom 2014-11-20
  http://lists.centos.org/pipermail/centos-announce/2014-November/020775.html
• F5 Security Advisory SOL15872
  https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15872.html?ref=rss
• SUSE Security Update SUSE-SU-2015:0003-1 vom 2015-01-05
  https://www.suse.com/support/update/announcement/2015/suse-su-20150003-1.html
• Mandriva Security Advisory MDVSA-2015:111 vom 2015-03-29
  http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2015%3A111/
• SUSE Security Update SUSE-SU-2014:1440-1 vom 2016-01-22
  https://www.suse.com/support/update/announcement/2014/suse-su-20141440-1.html
• Dell Security Advisory DSA-2024-251 vom 2024-11-11
  https://www.dell.com/support/kbdoc/de-de/000247018/dsa-2024-251-security-update-for-dell-networker-for-libxml2-2-9-0-vulnerabilities
• Dell Security Advisory DSA-2024-451 vom 2024-12-03
  https://www.dell.com/support/kbdoc/de-de/000255975/dsa-2024-451-security-update-for-dell-networker-for-libxml2-2-9-0-vulnerabilities
• Oracle Linux Security Advisory ELSA-2025-2673 vom 2025-03-21
  https://linux.oracle.com/errata/ELSA-2025-2673.html
• Dell Security Advisory DSA-2025-269 vom 2025-07-01
  https://www.dell.com/support/kbdoc/de-de/000338743/dsa-2025-269-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities