According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability found in libxml2 in versions before     2.9.11 shows that it did not propagate errors while     parsing XML mixed content, causing a NULL dereference.
    If an untrusted XML document was parsed in recovery     mode and post-validated, the flaw could be used to     crash the application. The highest threat from this     vulnerability is to system availability.(CVE-2021-3537)

  - There is a flaw in the xml entity encoding     functionality of libxml2 in versions before 2.9.11. An     attacker who is able to supply a crafted file to be     processed by an application linked with the affected     functionality of libxml2 could trigger an out-of-bounds     read. The most likely impact of this flaw is to     application availability, with some potential impact to     confidentiality and integrity if an attacker is able to     use memory information to further exploit the     application.(CVE-2021-3517)

  - There's a flaw in libxml2 in versions before 2.9.11. An     attacker who is able to submit a crafted file to be     processed by an application linked with libxml2 could     trigger a use-after-free. The greatest impact from this     flaw is to confidentiality, integrity, and     availability.(CVE-2021-3518)

  - This library allows to manipulate XML files. It     includes supportto read, modify and write XML and HTML     files. There is DTDs supportthis includes parsing and     validation even with complex DtDs, eitherat parse time     or later once the document has been modified. The     outputcan be a simple SAX stream or an(CVE-2021-3541)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted     file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to     confidentiality, integrity, and availability. (CVE-2021-3516)

  - There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker     who is able to supply a crafted file to be processed by an application linked with the affected     functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to     application availability, with some potential impact to confidentiality and integrity if an attacker is     able to use memory information to further exploit the application. (CVE-2021-3517)

  - There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to     be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact     from this flaw is to confidentiality, integrity, and availability. (CVE-2021-3518)

  - A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while     parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery     mode and post-validated, the flaw could be used to crash the application. The highest threat from this     vulnerability is to system availability. (CVE-2021-3537)

  - A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing     protection mechanisms and leading to denial of service. (CVE-2021-3541)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202107-05 (libxml2: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libxml2. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to process a specially crafted XML       document using an application linked against libxml2, possibly resulting       in a Denial of Service condition or obtaining sensitive information.
  Workaround :

    There is no known workaround at this time.

The version of Oracle MySQL Workbench installed on the remote Windows host is prior to 8.0.27. It is, therefore, affected by multiple vulnerabilities as referenced in the advisory.

  - Vulnerability in the MySQL Workbench product of Oracle MySQL (component: MySQL Workbench (OpenSSL)). Supported     versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via MySQL Workbench to compromise MySQL Workbench.  Successful attacks of this     vulnerability can result in unauthorized access to critical data or complete access to all MySQL Workbench     accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL     Workbench. (CVE-2021-3712)

  - Vulnerability in the MySQL Workbench product of Oracle MySQL (component: MySQL Workbench (libxml2)). Supported     versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows unauthenticated attacker     with network access via MySQL Workbench to compromise MySQL Workbench.  Successful attacks require human interaction     from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL     Workbench. (CVE-2021-3518)

  - Vulnerability in the MySQL Workbench product of Oracle MySQL (component: MySQL Workbench (OpenSSL)). Supported     versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via MySQL Workbench to compromise MySQL Workbench. Successful attacks of this vulnerability     can result in unauthorized access to critical data or complete access to all MySQL Workbench accessible data and     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Workbench

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.5. It is, therefore, affected by multiple vulnerabilities:

  - A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6, macOS Big     Sur 11.5. Visiting a maliciously crafted webpage may lead to a system denial of service. (CVE-2021-1821)

  - This issue was addressed with improved environment sanitization. This issue is fixed in tvOS 14.6, iOS     14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur     11.4, watchOS 7.5. A malicious application may be able to break out of its sandbox. (CVE-2021-30677)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5. An application may be able to execute arbitrary code with kernel privileges.
    (CVE-2021-30748)

  - A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari     14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to     arbitrary code execution. (CVE-2021-30758)

  - A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big     Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina.
    Processing a maliciously crafted font file may lead to arbitrary code execution. (CVE-2021-30759)

  - An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004     Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.
    (CVE-2021-30760)

  - An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur     11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to     execute arbitrary code with kernel privileges. (CVE-2021-30765, CVE-2021-30766)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. A sandboxed process may be able to circumvent     sandbox restrictions. (CVE-2021-30768)

  - This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5. A malicious     application may be able to gain root privileges. (CVE-2021-30772)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges. (CVE-2021-30774)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously     crafted audio file may lead to arbitrary code execution. (CVE-2021-30775)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Playing a malicious audio file may lead to an     unexpected application termination. (CVE-2021-30776)

  - An injection issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5,     Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to     gain root privileges. (CVE-2021-30777)

  - This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.5. A     malicious application may be able to bypass Privacy preferences. (CVE-2021-30778)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution.
    (CVE-2021-30779)

  - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004     Catalina. A malicious application may be able to gain root privileges. (CVE-2021-30780)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A local     attacker may be able to cause unexpected application termination or arbitrary code execution.
    (CVE-2021-30781)

  - This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update     2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to access     restricted files. (CVE-2021-30782)

  - An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur     11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process may be able     to circumvent sandbox restrictions. (CVE-2021-30783)

  - Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.5. A local     attacker may be able to execute code on the Apple T2 Security Chip. (CVE-2021-30784)

  - A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big     Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted     image may lead to arbitrary code execution. (CVE-2021-30785)

  - A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS Big     Sur 11.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or     arbitrary code execution. (CVE-2021-30786)

  - This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update     2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to cause unexpected system     termination or write kernel memory. (CVE-2021-30787)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a     maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.
    (CVE-2021-30788)

  - An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS     Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted     font file may lead to arbitrary code execution. (CVE-2021-30789)

  - An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in     macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Opening a     maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
    (CVE-2021-30790)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS     Big Sur 11.5. Processing a maliciously crafted file may disclose user information. (CVE-2021-30791)

  - An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.7,     macOS Big Sur 11.5. Processing a maliciously crafted image may lead to arbitrary code execution.
    (CVE-2021-30792)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5,     Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute     arbitrary code with kernel privileges. (CVE-2021-30793)

  - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7,     Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may     lead to arbitrary code execution. (CVE-2021-30795)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5,     Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing a maliciously crafted image     may lead to a denial of service. (CVE-2021-30796)

  - This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big     Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to code execution.
    (CVE-2021-30797)

  - A logic issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur     11.5, watchOS 7.6. A malicious application may be able to bypass certain Privacy preferences.
    (CVE-2021-30798)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     14.7, macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing     maliciously crafted web content may lead to arbitrary code execution. (CVE-2021-30799)

  - A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A     malicious application may be able to access a user's recent Contacts. (CVE-2021-30803)

  - A permissions issue was addressed with improved validation. This issue is fixed in iOS 14.7. A malicious     application may be able to access Find My data. (CVE-2021-30804)

  - A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big     Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able     to execute arbitrary code with kernel privileges. (CVE-2021-30805)

  - A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A     malicious application may be able to access data about the accounts the user is using Family Sharing with.
    (CVE-2021-30817)

  - This issue was addressed with a new entitlement. This issue is fixed in iOS 14.7, watchOS 7.6, macOS Big     Sur 11.5. A local attacker may be able to access analytics data. (CVE-2021-30871)

  - A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS     Big Sur 11.5. An application may be able to gain elevated privileges. (CVE-2021-31004)

  - Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS     7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privacy     preferences. (CVE-2021-31006)

  - There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to     be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact     from this flaw is to confidentiality, integrity, and availability. (CVE-2021-3518)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1677 advisory.

    There's a flaw in libxml2's xmllint. An attacker who is able to submit a crafted file to be processed by     xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity,     and availability. (CVE-2021-3516)

    There's a flaw in libxml2. An attacker who is able to submit a crafted file to be processed by an     application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to     confidentiality, integrity, and availability. (CVE-2021-3518)

    A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while     parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery     mode and post-validated, the flaw could be used to crash the application. The highest threat from this     vulnerability is to system availability. (CVE-2021-3537)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4991-1 advisory.

    Yunho Kim discovered that libxml2 incorrectly handled certain error conditions. A remote attacker could     exploit this with a crafted XML file to cause a denial of service, or possibly cause libxml2 to expose     sensitive information. This issue only affected Ubuntu 14.04 ESM, and Ubuntu 16.04 ESM. (CVE-2017-8872)

    Zhipeng Xie discovered that libxml2 incorrectly handled certain XML schemas. A remote attacker could     possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu     16.04 ESM, and Ubuntu 18.04 LTS. (CVE-2019-20388)

    It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A remote attacker could possibly     exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service. This     issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu     20.10. (CVE-2020-24977)

    It was discovered that libxml2 incorrectly handled invalid UTF-8 input. A remote attacker could possibly     exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of service.
    (CVE-2021-3517)

    It was discovered that libxml2 did not properly handle certain crafted XML files. A local attacker could     exploit this with a crafted input to cause libxml2 to crash, resulting in a denial of service, or possibly     execute arbitrary code. (CVE-2021-3516, CVE-2021-3518)

    It was discovered that libxml2 incorrectly handled error states. A remote attacker could exploit this with     a crafted XML file to cause libxml2 to crash, resulting in a denial of service. (CVE-2021-3537)

    Sebastian Pipping discovered that libxml2 did not properly handle certain crafted XML files. A remote     attacker could exploit this with a crafted XML file to cause libxml2 to crash, resulting in a denial of     service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-3541)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 13.4.0.0 and 13.5.0.0 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2022 CPU advisory.

  - Vulnerability in the Oracle Management Service component (Apache Log4j) of the Enterprise Manager     Base Platform. Easily exploitable vulnerability allows unauthenticated attacker with network access     via HTTP to compromise and take over the Enterprise Manager Base Platform. (CVE-2022-23305)

  - Vulnerability in the Enterprise Manager Install component (libxml2) of the Enterprise Manager     Base Platform. Easily exploitable vulnerability allows unauthenticated attacker with network access     via HTTP to compromise and take over the Enterprise Manager Base Platform. (CVE-2021-3518)

  - Vulnerability in the Enterprise Manager Install component (Apache Log4j) of the Enterprise Manager     Base Platform. Difficult to exploit vulnerability allows high privileged attacker with network access     via HTTP to compromise and take over the Enterprise Manager Base Platform. (CVE-2021-44832)

  - Vulnerability in the UI Framework component of the Enterprise Manager Base Platform. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     the Enterprise Manager Base Platform. Successful attacks require human interaction from a person other     than the attacker and while the vulnerability is in Enterprise Manager Base Platform, attacks may     significantly impact additional products (scope change). Successful attacks of this vulnerability     can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform     accessible data. (CVE-2022-21469)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
153086	EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2021-2339)	Nessus	Huawei Local Security Checks	2021/9/7	2023/12/1	high
156511	EulerOS Virtualization 3.0.2.6 : libxml2 (EulerOS-SA-2021-2884)	Nessus	Huawei Local Security Checks	2022/1/6	2023/11/21	high
156968	GLSA-202107-05 : libxml2: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2022/1/24	2024/1/16	high
157940	EulerOS Virtualization 3.0.6.0 : libxml2 (EulerOS-SA-2022-1082)	Nessus	Huawei Local Security Checks	2022/2/12	2023/11/9	high
154655	Oracle MySQL Workbench < 8.0.27 Multiple Vulnerabilities (Oct 2021)	Nessus	Windows	2021/10/28	2023/11/27	high
152038	macOS 11.x < 11.5 Multiple Vulnerabilities (HT212602)	Nessus	MacOS X Local Security Checks	2021/7/23	2024/7/22	critical
151267	Amazon Linux 2 : libxml2 (ALAS-2021-1677)	Nessus	Amazon Linux Local Security Checks	2021/7/1	2024/12/11	high
150858	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : libxml2 vulnerabilities (USN-4991-1)	Nessus	Ubuntu Local Security Checks	2021/6/17	2024/8/27	critical
160377	Oracle Enterprise Manager Cloud Control (Apr 2022 CPU)	Nessus	Misc.	2022/4/29	2023/10/31	critical

检测

插件搜索

high

high

high

high

high

critical

high

critical

critical