Add fix for CVE-2020-24977 (RHBZ#1877788).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Add correct fix for CVE-2020-24977 (RHBZ#1877788), thanks: Jan de Groot.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GNOME project libxml2 v2.9.10 has a global buffer     over-read vulnerability in xmlEncodeEntitiesInternal at     libxml2/entities.c. The issue has been fixed in commit     50f06b3e.(CVE-2020-24977)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1597 advisory.

  - libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c (CVE-2020-24977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at     libxml2/entities.c. The issue has been fixed in commit 50f06b3e. (CVE-2020-24977)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Oracle HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2022 CPU advisory.

  - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener     (Apache HTTP Server)). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     Oracle HTTP Server. Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server.
    CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). (CVE-2021-39275)

  - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: SSL Module     (cURL)). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit     vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP     Server. Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1     Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). (CVE-2021-22901)

  - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: SSL Module (Apache     HTTP Server)). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP     Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete     access to some of Oracle HTTP Server accessible data and unauthorized ability to cause a partial denial of     service (partial DOS) of Oracle HTTP Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).
    CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L). (CVE-2021-44224)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - GNOME project libxml2 v2.9.10 and earlier have a global     buffer over-read vulnerability in     xmlEncodeEntitiesInternal at libxml2/entities.c. The     issue has been fixed in commit 8e7c20a1     (20910-GITv2.9.10-103-g8e7c20a1).(CVE-2020-24977)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - GNOME project libxml2 v2.9.10 and earlier have a global     buffer over-read vulnerability in     xmlEncodeEntitiesInternal at libxml2/entities.c. The     issue has been fixed in commit 8e7c20a1     (20910-GITv2.9.10-103-g8e7c20a1).(CVE-2020-24977)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libxml2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - GNOME project libxml2 v2.9.10 and earlier have a global     Buffer Overflow vulnerability in     xmlEncodeEntitiesInternal at libxml2/entities.c. The     issue has been fixed in commit 8e7c20a1     (20910-GITv2.9.10-103-g8e7c20a1).(CVE-2020-24977)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - GNOME project libxml2 v2.9.10 has a global buffer     over-read vulnerability in xmlEncodeEntitiesInternal at     libxml2/entities.c. The issue has been fixed in commit     50f06b3e.(CVE-2020-24977)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4991-1 advisory.

    Yunho Kim discovered that libxml2 incorrectly handled certain error conditions. A remote attacker could     exploit this with a crafted XML file to cause a denial of service, or possibly cause libxml2 to expose     sensitive information. This issue only affected Ubuntu 14.04 ESM, and Ubuntu 16.04 ESM. (CVE-2017-8872)

    Zhipeng Xie discovered that libxml2 incorrectly handled certain XML schemas. A remote attacker could     possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu     16.04 ESM, and Ubuntu 18.04 LTS. (CVE-2019-20388)

    It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A remote attacker could possibly     exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. This     issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu     20.10. (CVE-2020-24977)

    It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A remote attacker could possibly     exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service.
    (CVE-2021-3517)

    It was discovered that libxml2 did not properly handle certain crafted XML files. A local attacker could     exploit this with a crafted input to cause libxml2 to crash, resulting in a denial of service, or possibly     execute arbitrary code. (CVE-2021-3516, CVE-2021-3518)

    It was discovered that libxml2 incorrectly handled error states. A remote attacker could exploit this with     a crafted XML file to cause libxml2 to crash, resulting in a denial of service. (CVE-2021-3537)

    Sebastian Pipping discovered that libxml2 did not properly handle certain crafted XML files. A remote     attacker could exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of     service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3541)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:1597 advisory.

  - GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at     libxml2/entities.c. The issue has been fixed in commit 50f06b3e. (CVE-2020-24977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has libxml2 packages installed that are affected by multiple vulnerabilities:

  - GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at     libxml2/entities.c. The issue has been fixed in commit 50f06b3e. (CVE-2020-24977)

  - There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted     file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to     confidentiality, integrity, and availability. (CVE-2021-3516)

  - There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker     who is able to supply a crafted file to be processed by an application linked with the affected     functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to     application availability, with some potential impact to confidentiality and integrity if an attacker is     able to use memory information to further exploit the application. (CVE-2021-3517)

  - There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to     be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact     from this flaw is to confidentiality, integrity, and availability. (CVE-2021-3518)

  - A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while     parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery     mode and post-validated, the flaw could be used to crash the application. The highest threat from this     vulnerability is to system availability. (CVE-2021-3537)

  - A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing     protection mechanisms and leading to denial of service. (CVE-2021-3541)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libxml2 installed on the remote host is prior to 2.9.1-6.6.42. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1743 advisory.

    parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the     xmlParserHandlePEReference function in the case of a '%' character in a DTD name. (CVE-2017-16931)

    GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at     libxml2/entities.c. The issue has been fixed in commit 50f06b3e. (CVE-2020-24977)

    There's a flaw in libxml2's xmllint. An attacker who is able to submit a crafted file to be processed by     xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity,     and availability. (CVE-2021-3516)

    There is a flaw in the xml entity encoding functionality of libxml2. An attacker who is able to supply a     crafted file to be processed by an application linked with the affected functionality of libxml2 could     trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with     some potential impact to confidentiality and integrity if an attacker is able to use memory information to     further exploit the application. (CVE-2021-3517)

    There's a flaw in libxml2. An attacker who is able to submit a crafted file to be processed by an     application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to     confidentiality, integrity, and availability. (CVE-2021-3518)

    A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML     mixed content. This flaw causes the application to crash if an untrusted XML document is parsed in     recovery mode and post validated. The highest threat from this vulnerability is to system availability.
    (CVE-2021-3537)

    A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing     protection mechanisms and leading to denial of service. (CVE-2021-3541)

    valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. (CVE-2022-23308)

    A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer     types. A substantial input causes values to calculate buffer sizes to overflow, resulting in an out-of-     bounds write. (CVE-2022-29824)

    An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the     XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to     access an array at a negative 2GB offset, typically leading to a segmentation fault. (CVE-2022-40303)

    An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a     hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be     provoked. (CVE-2022-40304)

    A NULL pointer dereference exists when parsing (invalid) XML schemas in libxml2     xmlSchemaCheckCOSSTDerivedOK (CVE-2023-28484)

    libxml2 Hashing of empty dict strings isn't deterministic. When hashing empty strings which aren't null-     terminated, xmlDictComputeFastKey could produce inconsistent results. This could lead to various logic or     memory errors, including double frees. (CVE-2023-29469)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
140619	Fedora 32 : libxml2 (2020-35087800be)	Nessus	Fedora Local Security Checks	2020/9/17	2024/2/20	medium
140812	Fedora 31 : libxml2 (2020-20ab468a33)	Nessus	Fedora Local Security Checks	2020/9/28	2024/2/20	medium
143129	Fedora 32 : mingw-libxml2 (2020-7773c53bc8)	Nessus	Fedora Local Security Checks	2020/11/20	2024/2/8	medium
143349	Fedora 32 : libxml2 (2020-b6aaf25741)	Nessus	Fedora Local Security Checks	2020/11/30	2024/2/7	medium
145125	EulerOS 2.0 SP3 : libxml2 (EulerOS-SA-2021-1093)	Nessus	Huawei Local Security Checks	2021/1/20	2024/1/29	medium
149743	CentOS 8 : libxml2 (CESA-2021:1597)	Nessus	CentOS Local Security Checks	2021/5/19	2024/1/1	medium
229917	Linux Distros Unpatched Vulnerability : CVE-2020-24977	Nessus	Misc.	2025/3/5	2025/8/31	medium
159947	Oracle HTTP Server (Apr 2022 CPU)	Nessus	Web Servers	2022/4/20	2023/11/1	critical
142090	EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2020-2289)	Nessus	Huawei Local Security Checks	2020/10/30	2024/2/13	medium
142280	EulerOS 2.0 SP2 : libxml2 (EulerOS-SA-2020-2366)	Nessus	Huawei Local Security Checks	2020/11/3	2024/2/12	medium
147045	EulerOS Virtualization 3.0.6.6 : libxml2 (EulerOS-SA-2021-1495)	Nessus	Huawei Local Security Checks	2021/3/4	2024/1/16	medium
147434	EulerOS Virtualization 2.9.1 : libxml2 (EulerOS-SA-2021-1610)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/11	medium
147479	EulerOS Virtualization 3.0.2.6 : libxml2 (EulerOS-SA-2021-1415)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/11	medium
150858	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : libxml2 vulnerabilities (USN-4991-1)	Nessus	Ubuntu Local Security Checks	2021/6/17	2025/9/3	critical
157615	AlmaLinux 8 : libxml2 (ALSA-2021:1597)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/10	medium
160750	NewStart CGSL MAIN 6.02 : libxml2 Multiple Vulnerabilities (NS-SA-2022-0050)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2023/11/1	high
175091	Amazon Linux AMI : libxml2 (ALAS-2023-1743)	Nessus	Amazon Linux Local Security Checks	2023/5/4	2024/12/11	critical
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	2023/6/30	2023/7/6	critical

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

medium

critical

medium

high

critical

critical