libxml2: Schwachstelle ermöglicht Denial Of Service

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2013-0338

  libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) …

  libxml2 Debian
  Apr 25, 2013
• Unscored —
  CVE-2013-0339

  libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xml…

  libxml2 Debian
  Jan 21, 2014

Revision history

1. 2024-12-03 #20

   Neue Updates von Dell aufgenommen

2. 2024-11-10 #19

   Neue Updates von Dell aufgenommen

3. 2013-11-05 #17

   New remediations available

4. 2013-11-05 #18

   Version nicht vorhanden

5. 2013-11-04 #13

   New remediations available

6. 2013-11-04 #14

   New remediations available

7. 2013-11-04 #15

   Version nicht vorhanden

8. 2013-11-04 #16

   Version nicht vorhanden

9. 2013-07-17 #12

   New remediations available

10. 2013-07-16 #11

    New remediations available

11. 2013-07-15 #10

    New remediations available

12. 2013-06-04 #9

    New remediations available

13. 2013-05-07 #8

    New remediations available

14. 2013-05-02 #7

    New remediations available

15. 2013-03-25 #6

    New remediations available

16. 2013-03-13 #5

    New remediations available

17. 2013-02-28 #4

    New remediations available

18. 2013-02-26 #1

    Initial Release

19. 2013-02-26 #2

    Version nicht vorhanden

20. 2013-02-26 #3

    Version nicht vorhanden

References

• Maillingliste OSS Security vom 2013-02-21
  http://www.openwall.com/lists/oss-security/2013/02/22/3
• Red Hat Security Advisory RHSA-2013:0581-1 vom 2013-02-28
  http://rhn.redhat.com/errata/RHSA-2013-0581.html
• Red Hat Security Advisory RHSA-2013:0636-1 vom 2013-03-13
  http://rhn.redhat.com/errata/RHSA-2013-0636.html
• Debian Security Advisory DSA-2652 vom 2013-03-26
  http://seclists.org/fulldisclosure/2013/Mar/215
• SUSE Security Update SUSE-SU-2013:0744-1 vom 2013-05-02
  https://www.suse.com/support/update/announcement/2013/suse-su-20130744-1.html
• SUSE Security Update SUSE-SU-2013:0743-1 vom 2013-05-07
  https://www.suse.com/support/update/announcement/2013/suse-su-20130743-1.html
• Oracle Blogeintrag "CVE-2013-0338 Denial of Service (DoS) vulnerability in libxml2" vom 2013-06-04
  https://blogs.oracle.com/sunsecurity/entry/cve_2013_0338_denial_of
• Ubuntu Security Notice USN-1904-1 vom 2013-07-15
  http://www.ubuntu.com/usn/usn-1904-1/
• Oracle Third Party Vulnerability Resolution Blog vom 2013-07-16
  https://blogs.oracle.com/sunsecurity/entry/cve_2013_0338_denial_of
• Ubuntu Security Notice USN-1904-2 vom 2013-07-17
  http://www.ubuntu.com/usn/usn-1904-2/
• SuSE Security-Announce] SUSE-SU-2013:1627
  http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
• SuSE Security-Announce SUSE-SU-2013:1625
  http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00000.html
• SUSE Security Update SUSE-SU-2013:1625-1 vom 2013-11-04
  https://www.suse.com/support/update/announcement/2013/suse-su-20131625-1.html
• Dell Security Advisory DSA-2024-251 vom 2024-11-11
  https://www.dell.com/support/kbdoc/de-de/000247018/dsa-2024-251-security-update-for-dell-networker-for-libxml2-2-9-0-vulnerabilities
• Dell Security Advisory DSA-2024-451 vom 2024-12-03
  https://www.dell.com/support/kbdoc/de-de/000255975/dsa-2024-451-security-update-for-dell-networker-for-libxml2-2-9-0-vulnerabilities