parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.

USN-1904-1 fixed vulnerabilities in libxml2. The update caused a regression for certain users. This update fixes the problem.

We apologize for the inconvenience.

It was discovered that libxml2 would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly obtain access to arbitrary files or cause resource consumption. This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS, and Ubuntu 12.10.
(CVE-2013-0339)

It was discovered that libxml2 incorrectly handled documents that end abruptly. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. (CVE-2013-2877).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0513 advisory.

    - Improve handling of xmlStopParser(CVE-2013-2877)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

a. VMware vCSA cross-site scripting vulnerability

   VMware vCenter Server Appliance (vCSA) contains a vulnerability    that may allow for Cross Site Scripting. Exploitation of this    vulnerability in vCenter Server requires tricking a user to click    on a malicious link or to open a malicious web page. 

   VMware would like to thank Tanya Secker of Trustwave SpiderLabs for    reporting this issue to us. 

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2014-3797 to this issue. 

b. vCenter Server certificate validation issue

   vCenter Server does not properly validate the presented certificate    when establishing a connection to a CIM Server residing on an ESXi    host. This may allow for a Man-in-the-middle attack against the CIM    service.

   VMware would like to thank The Google Security Team for reporting    this issue to us.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the identifier CVE-2014-8371 to this issue. 

  c. Update to ESXi libxml2 package

  libxml2 is updated to address multiple security issues. 

  The Common Vulnerabilities and Exposures project   (cve.mitre.org) has assigned the names CVE-2013-2877 and   CVE-2014-0191 to these issues. 

  d. Update to ESXi Curl package

  Curl is updated to address multiple security issues. 

  The Common Vulnerabilities and Exposures project   (cve.mitre.org) has assigned the names CVE-2014-0015 and   CVE-2014-0138 to these issues. 

  e. Update to ESXi Python package

  Python is updated to address multiple security issues. 

  The Common Vulnerabilities and Exposures project   (cve.mitre.org) has assigned the names CVE-2013-1752 and   CVE-2013-4238 to these issues. 

  f. vCenter and Update Manager, Oracle JRE 1.6 Update 81

  Oracle has documented the CVE identifiers that are addressed in   JRE 1.6.0 update 81 in the Oracle Java SE Critical Patch Update   Advisory of July 2014. The References section provides a link to   this advisory.

The remote host is affected by the vulnerability described in GLSA-201412-11 (AMD64 x86 emulation base libraries: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in AMD64 x86 emulation       base libraries. Please review the CVE identifiers referenced below for       details.
  Impact :

    A context-dependent attacker may be able to execute arbitrary code,       cause a Denial of Service condition, or obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

libxml2 has been updated to fix the following security issue :

  - CVE-2013-0338: libxml2 allowed context-dependent     attackers to cause a denial of service (CPU and memory     consumption) via an XML file containing an entity     declaration with long replacement text and many     references to this entity, aka 'internal entity     expansion' with linear complexity.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Google Chrome Releases reports :

A special reward for Andrey Labunets for his combination of CVE-2013-2879 and CVE-2013-2868 along with some (since fixed) server-side bugs.

[252216] Low CVE-2013-2867: Block pop-unders in various scenarios.

[252062] High CVE-2013-2879: Confusion setting up sign-in and sync.
Credit to Andrey Labunets.

[252034] Medium CVE-2013-2868: Incorrect sync of NPAPI extension component. Credit to Andrey Labunets.

[245153] Medium CVE-2013-2869: Out-of-bounds read in JPEG2000 handling. Credit to Felix Groebert of Google Security Team.

[244746] [242762] Critical CVE-2013-2870: Use-after-free with network sockets. Credit to Collin Payne.

[244260] Medium CVE-2013-2853: Man-in-the-middle attack against HTTP in SSL. Credit to Antoine Delignat-Lavaud and Karthikeyan Bhargavan from Prosecco at INRIA Paris.

[243991] [243818] High CVE-2013-2871: Use-after-free in input handling. Credit to miaubiz.

[Mac only] [242702] Low CVE-2013-2872: Possible lack of entropy in renderers. Credit to Eric Rescorla.

[241139] High CVE-2013-2873: Use-after-free in resource loading.
Credit to miaubiz.

[233848] Medium CVE-2013-2875: Out-of-bounds-read in SVG. Credit to miaubiz.

[229504] Medium CVE-2013-2876: Extensions permissions confusion with interstitials. Credit to Dev Akhawe.

[229019] Low CVE-2013-2877: Out-of-bounds read in XML parsing. Credit to Aki Helin of OUSPG.

[196636] None: Remove the 'viewsource' attribute on iframes. Credit to Collin Jackson.

[177197] Medium CVE-2013-2878: Out-of-bounds read in text handling.
Credit to Atte Kettunen of OUSPG.

Multiple vulnerabilities has been discovered and corrected in libxml2 :

A denial of service flaw was found in the way libxml2, a library providing support to read, modify and write XML and HTML files, performed string substitutions when entity values for external entity references replacement (--noent option) was requested / enabled during the XML file parsing. A remote attacker could provide a specially crafted XML file containing an external entity expansion, when processed would lead to excessive CPU consumption (denial of service) (CVE-2013-0339). This a different flaw from CVE-2013-0338.

parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state (CVE-2013-2877).

The updated packages have been patched to correct these issues.

This update fixes a DoS vulnerability in libxml2. CVE-2013-2877 has been assigned to this issue.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Update doc/redhat.gif in tarball

  - Add libxml2-oracle-enterprise.patch and update logos in     tarball

  - CVE-2014-3660 denial of service via recursive entity     expansion (rhbz#1149085)

  - Fix a set of regressions introduced in CVE-2014-0191     (rhbz#1105011)

  - Improve handling of xmlStopParser(CVE-2013-2877)

  - Do not fetch external parameter entities (CVE-2014-0191)

  - Fix a regression in 2.9.0 breaking validation while     streaming (rhbz#863166)

  - detect and stop excessive entities expansion upon     replacement (rhbz#912575)

According to its self-reported version number, the remote Junos device is affected by multiple vulnerabilities in the libxml2 library :

  - A heap-based buffer overflow vulnerability exists which     can result in arbitrary code execution. (CVE-2011-1944)

  - A denial of service vulnerability exists which can     result in excessive CPU consumption. (CVE-2012-0841)

  - A heap-based buffer overflow vulnerability exists in     the 'xmlParseAttValueComplex' function which can result     in arbitrary code execution. (CVE-2012-5134)

  - A denial of service vulnerability exists due to     excessive CPU and memory consumption in the processing     of XML files containing entity declarations with long     replacement text (also known as 'internal entity     expansion with linear complexity'). (CVE-2013-0338)

  - A denial of service vulnerability exists related to the     XML_PARSER_EOF state checking. (CVE-2013-2877)

These vulnerabilities can be exploited by a remote attacker via a specially crafted XML file.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
78283	Amazon Linux AMI : libxml2 (ALAS-2014-340)	Nessus	Amazon Linux Local Security Checks	2014/10/12	2018/4/18	medium
68957	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : libxml2 regression (USN-1904-2)	Nessus	Ubuntu Local Security Checks	2013/7/18	2019/9/19	medium
74100	Oracle Linux 6 : libxml2 (ELSA-2014-0513)	Nessus	Oracle Linux Local Security Checks	2014/5/20	2024/10/22	critical
79762	VMSA-2014-0012 : VMware vSphere product updates address security vulnerabilities	Nessus	VMware ESX Local Security Checks	2014/12/6	2021/1/6	medium
79964	GLSA-201412-11 : AMD64 x86 emulation base libraries: Multiple vulnerabilities (Heartbleed)	Nessus	Gentoo Local Security Checks	2014/12/15	2022/5/5	critical
83599	SUSE SLES10 Security Update : libxml2 (SUSE-SU-2013:1627-1)	Nessus	SuSE Local Security Checks	2015/5/20	2021/1/19	high
67237	FreeBSD : chromium -- multiple vulnerabilities (3b80104f-e96c-11e2-8bac-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	2013/7/11	2021/1/6	high
69053	Mandriva Linux Security Advisory : libxml2 (MDVSA-2013:198)	Nessus	Mandriva Local Security Checks	2013/7/25	2021/1/6	medium
72198	SuSE 11.2 / 11.3 Security Update : libxml2 (SAT Patch Numbers 8713 / 8714)	Nessus	SuSE Local Security Checks	2014/1/29	2021/1/19	medium
79546	OracleVM 3.3 : libxml2 (OVMSA-2014-0031)	Nessus	OracleVM Local Security Checks	2014/11/26	2021/1/4	medium
80957	Juniper Junos libxml2 Library Multiple Vulnerabilities (JSA10669)	Nessus	Junos Local Security Checks	2015/1/23	2018/7/12	high
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	2023/6/30	2023/7/6	critical

检测

插件搜索

medium

medium

critical

medium

critical

high

high

medium

medium

medium

high

critical