The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in     Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote     attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML     document. (CVE-2016-1840)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.5. It is, therefore, affected by multiple vulnerabilities in the following components :

  - AMD
  - apache_mod_php
  - AppleGraphicsControl
  - AppleGraphicsPowerManagement
  - Assistant
  - ATS
  - Audio
  - Captive
  - CFNetwork
  - CommonCrypto
  - CoreCapture
  - CoreStorage
  - Crash
  - Disk
  - Disk
  - Driver
  - Drivers
  - Drivers
  - Graphics
  - Graphics
  - Graphics
  - ImageIO
  - Images
  - Intel
  - IOAcceleratorFamily
  - IOAudioFamily
  - IOFireWireFamily
  - IOHIDFamily
  - Kernel
  - libc
  - libxml2
  - libxslt
  - Lock
  - MapKit
  - Messages
  - Multi-Touch
  - Network
  - NVIDIA
  - OpenGL
  - Proxies
  - QuickTime
  - Reporter
  - SceneKit
  - Screen
  - Tcl
  - Utility

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

According to its banner, the version of the remote Apple TV device is prior to 9.2.1. It is, therefore, affected by multiple vulnerabilities in the following components :

  - CFNetwork Proxies
  - CommonCrypto
  - CoreCapture
  - Disk Images
  - ImageIO
  - IOAcceleratorFamily
  - IOHIDFamily
  - Kernel
  - libc
  - libxml2
  - libxslt
  - OpenGL
  - WebKit
  - WebKit Canvas

Note that only 4th generation models are affected by the vulnerabilities.

An update for libxml2 is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

[Updated 18 July 2016] This advisory has been updated to push packages into the Red Hat Enterprise Linux 6 Desktop channels. The packages included in this revised update have not been changed in any way from the packages included in the original advisory.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es) :

A heap-based buffer overflow flaw was found in the way libxml2 parsed certain crafted XML input. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or execute arbitrary code with the permissions of the user running the application.
(CVE-2016-1834, CVE-2016-1840)

Multiple denial of service flaws were found in libxml2. A remote attacker could provide a specially crafted XML file that, when processed by an application using libxml2, could cause that application to crash. (CVE-2016-1762, CVE-2016-1833, CVE-2016-1835, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838, CVE-2016-1839, CVE-2016-3627, CVE-2016-3705, CVE-2016-4447, CVE-2016-4448, CVE-2016-4449)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1292 advisory.

    - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
    - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071>     (CVE-2016-1834)
    - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup     <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
    - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal     <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
    - Bug 758605: Heap-based buffer overread in xmlDictAddString     <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
    - Bug 759398: Heap use-after-free in xmlDictComputeFastKey     <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
    - Fix inappropriate fetch of entities content (CVE-2016-4449)
    - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
    - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
    - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
    - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
    - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
    - Avoid building recursive entities (CVE-2016-3627)
    - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
219340	Linux Distros Unpatched Vulnerability : CVE-2016-1840	Nessus	Misc.	2025/3/4	2026/9/2	high
91228	Mac OS X 10.11.x < 10.11.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2016/5/19	2024/5/28	high
91311	Apple TV < 9.2.1 Multiple Vulnerabilities	Nessus	Misc.	2016/5/24	2019/11/14	high
91786	CentOS 6 / 7 : libxml2 (CESA-2016:1292)	Nessus	CentOS Local Security Checks	2016/6/24	2021/1/4	critical
91797	Oracle Linux 6 / 7 : libxml2 (ELSA-2016-1292)	Nessus	Oracle Linux Local Security Checks	2016/6/24	2024/11/1	critical

检测

插件搜索

high

high

high

critical

critical