The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2569 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c (CVE-2021-3516)

    * libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c (CVE-2021-3517)

    * libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c (CVE-2021-3518)

    * libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode     (CVE-2021-3537)

    * libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms (CVE-2021-3541)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2569 advisory.

  - libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c (CVE-2021-3516)

  - libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c (CVE-2021-3517)

  - libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c (CVE-2021-3518)

  - libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode     (CVE-2021-3537)

  - libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms (CVE-2021-3541)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - There's a flaw in libxml2's xmllint in versions before     2.9.11. An attacker who is able to submit a crafted     file to be processed by xmllint could trigger a     use-after-free. The greatest impact of this flaw is to     confidentiality, integrity, and     availability.(CVE-2021-3516)

  - There is a flaw in the xml entity encoding     functionality of libxml2 in versions before 2.9.11. An     attacker who is able to supply a crafted file to be     processed by an application linked with the affected     functionality of libxml2 could trigger an out-of-bounds     read. The most likely impact of this flaw is to     application availability, with some potential impact to     confidentiality and integrity if an attacker is able to     use memory information to further exploit the     application.(CVE-2021-3517)

  - There's a flaw in libxml2 in versions before 2.9.11. An     attacker who is able to submit a crafted file to be     processed by an application linked with libxml2 could     trigger a use-after-free. The greatest impact from this     flaw is to confidentiality, integrity, and     availability.(CVE-2021-3518)

  - A vulnerability found in libxml2 in versions before     2.9.11 shows that it did not propagate errors while     parsing XML mixed content, causing a NULL dereference.
    If an untrusted XML document was parsed in recovery     mode and post-validated, the flaw could be used to     crash the application. The highest threat from this     vulnerability is to system availability.(CVE-2021-3537)

  - This library allows to manipulate XML files. It     includes supportto read, modify and write XML and HTML     files. There is DTDs supportthis includes parsing and     validation even with complex DtDs, eitherat parse time     or later once the document has been modified. The     outputcan be a simple SAX stream or an(CVE-2021-3541)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - This library allows to manipulate XML files. It     includes supportto read, modify and write XML and HTML     files. There is DTDs supportthis includes parsing and     validation even with complex DtDs, eitherat parse time     or later once the document has been modified. The     outputcan be a simple SAX stream or an(CVE-2021-3541)

  - There's a flaw in libxml2's xmllint. An attacker who is     able to submit a crafted file to be processed by     xmllint could trigger a use-after-free. The greatest     impact of this flaw is to confidentiality, integrity,     and availability.(CVE-2021-3516)

  - There is a flaw in the xml entity encoding     functionality of libxml2. An attacker who is able to     supply a crafted file to be processed by an application     linked with the affected functionality of libxml2 could     trigger an out-of-bounds read. The most likely impact     of this flaw is to application availability, with some     potential impact to confidentiality and integrity if an     attacker is able to use memory information to further     exploit the application.(CVE-2021-3517)

  - There's a flaw in libxml2 in versions before 2.9.11. An     attacker who is able to submit a crafted file to be     processed by an application linked with libxml2 could     trigger a use-after-free. The greatest impact from this     flaw is to confidentiality, integrity, and     availability.(CVE-2021-3518)

  - A vulnerability found in libxml2 in versions before     2.9.11 shows that it did not propagate errors while     parsing XML mixed content, causing a NULL dereference.
    If an untrusted XML document was parsed in recovery     mode and post-validated, the flaw could be used to     crash the application. The highest threat from this     vulnerability is to system availability.(CVE-2021-3537)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability found in libxml2 in versions before     2.9.11 shows that it did not propagate errors while     parsing XML mixed content, causing a NULL dereference.
    If an untrusted XML document was parsed in recovery     mode and post-validated, the flaw could be used to     crash the application. The highest threat from this     vulnerability is to system availability.(CVE-2021-3537)

  - There is a flaw in the xml entity encoding     functionality of libxml2 in versions before 2.9.11. An     attacker who is able to supply a crafted file to be     processed by an application linked with the affected     functionality of libxml2 could trigger an out-of-bounds     read. The most likely impact of this flaw is to     application availability, with some potential impact to     confidentiality and integrity if an attacker is able to     use memory information to further exploit the     application.(CVE-2021-3517)

  - There's a flaw in libxml2 in versions before 2.9.11. An     attacker who is able to submit a crafted file to be     processed by an application linked with libxml2 could     trigger a use-after-free. The greatest impact from this     flaw is to confidentiality, integrity, and     availability.(CVE-2021-3518)

  - This library allows to manipulate XML files. It     includes supportto read, modify and write XML and HTML     files. There is DTDs supportthis includes parsing and     validation even with complex DtDs, eitherat parse time     or later once the document has been modified. The     outputcan be a simple SAX stream or an(CVE-2021-3541)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted     file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to     confidentiality, integrity, and availability. (CVE-2021-3516)

  - There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker     who is able to supply a crafted file to be processed by an application linked with the affected     functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to     application availability, with some potential impact to confidentiality and integrity if an attacker is     able to use memory information to further exploit the application. (CVE-2021-3517)

  - There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to     be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact     from this flaw is to confidentiality, integrity, and availability. (CVE-2021-3518)

  - A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while     parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery     mode and post-validated, the flaw could be used to crash the application. The highest threat from this     vulnerability is to system availability. (CVE-2021-3537)

  - A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing     protection mechanisms and leading to denial of service. (CVE-2021-3541)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of libxml2 installed on the remote host is prior to 2.9.1-6.6.42. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1743 advisory.

    parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the     xmlParserHandlePEReference function in the case of a '%' character in a DTD name. (CVE-2017-16931)

    GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at     libxml2/entities.c. The issue has been fixed in commit 50f06b3e. (CVE-2020-24977)

    There's a flaw in libxml2's xmllint. An attacker who is able to submit a crafted file to be processed by     xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity,     and availability. (CVE-2021-3516)

    There is a flaw in the xml entity encoding functionality of libxml2. An attacker who is able to supply a     crafted file to be processed by an application linked with the affected functionality of libxml2 could     trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with     some potential impact to confidentiality and integrity if an attacker is able to use memory information to     further exploit the application. (CVE-2021-3517)

    There's a flaw in libxml2. An attacker who is able to submit a crafted file to be processed by an     application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to     confidentiality, integrity, and availability. (CVE-2021-3518)

    A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML     mixed content. This flaw causes the application to crash if an untrusted XML document is parsed in     recovery mode and post validated. The highest threat from this vulnerability is to system availability.
    (CVE-2021-3537)

    A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing     protection mechanisms and leading to denial of service. (CVE-2021-3541)

    valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. (CVE-2022-23308)

    A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer     types. A substantial input causes values to calculate buffer sizes to overflow, resulting in an out-of-     bounds write. (CVE-2022-29824)

    An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the     XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to     access an array at a negative 2GB offset, typically leading to a segmentation fault. (CVE-2022-40303)

    An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a     hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be     provoked. (CVE-2022-40304)

    A NULL pointer dereference exists when parsing (invalid) XML schemas in libxml2     xmlSchemaCheckCOSSTDerivedOK (CVE-2023-28484)

    libxml2 Hashing of empty dict strings isn't deterministic. When hashing empty strings which aren't null-     terminated, xmlDictComputeFastKey could produce inconsistent results. This could lead to various logic or     memory errors, including double frees. (CVE-2023-29469)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle MySQL Workbench installed on the remote Windows host is prior to 8.0.27. It is, therefore, affected by multiple vulnerabilities as referenced in the advisory.

  - Vulnerability in the MySQL Workbench product of Oracle MySQL (component: MySQL Workbench (OpenSSL)). Supported     versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via MySQL Workbench to compromise MySQL Workbench.  Successful attacks of this     vulnerability can result in unauthorized access to critical data or complete access to all MySQL Workbench     accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL     Workbench. (CVE-2021-3712)

  - Vulnerability in the MySQL Workbench product of Oracle MySQL (component: MySQL Workbench (libxml2)). Supported     versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows unauthenticated attacker     with network access via MySQL Workbench to compromise MySQL Workbench.  Successful attacks require human interaction     from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL     Workbench. (CVE-2021-3518)

  - Vulnerability in the MySQL Workbench product of Oracle MySQL (component: MySQL Workbench (OpenSSL)). Supported     versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via MySQL Workbench to compromise MySQL Workbench. Successful attacks of this vulnerability     can result in unauthorized access to critical data or complete access to all MySQL Workbench accessible data and     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Workbench

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 13.4.0.0 and 13.5.0.0 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2022 CPU advisory.

  - Vulnerability in the Oracle Management Service component (Apache Log4j) of the Enterprise Manager     Base Platform. Easily exploitable vulnerability allows unauthenticated attacker with network access     via HTTP to compromise and take over the Enterprise Manager Base Platform. (CVE-2022-23305)

  - Vulnerability in the Enterprise Manager Install component (libxml2) of the Enterprise Manager     Base Platform. Easily exploitable vulnerability allows unauthenticated attacker with network access     via HTTP to compromise and take over the Enterprise Manager Base Platform. (CVE-2021-3518)

  - Vulnerability in the Enterprise Manager Install component (Apache Log4j) of the Enterprise Manager     Base Platform. Difficult to exploit vulnerability allows high privileged attacker with network access     via HTTP to compromise and take over the Enterprise Manager Base Platform. (CVE-2021-44832)

  - Vulnerability in the UI Framework component of the Enterprise Manager Base Platform. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     the Enterprise Manager Base Platform. Successful attacks require human interaction from a person other     than the attacker and while the vulnerability is in Enterprise Manager Base Platform, attacks may     significantly impact additional products (scope change). Successful attacks of this vulnerability     can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform     accessible data. (CVE-2022-21469)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
151142	RHEL 8 : libxml2 (RHSA-2021:2569)	Nessus	Red Hat Local Security Checks	2021/6/29	2024/11/7	high
151363	CentOS 8 : libxml2 (CESA-2021:2569)	Nessus	CentOS Local Security Checks	2021/7/3	2023/12/11	high
152286	EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2021-2275)	Nessus	Huawei Local Security Checks	2021/8/9	2023/12/6	high
152408	EulerOS 2.0 SP8 : libxml2 (EulerOS-SA-2021-2306)	Nessus	Huawei Local Security Checks	2021/8/10	2023/12/4	high
153086	EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2021-2339)	Nessus	Huawei Local Security Checks	2021/9/7	2023/12/1	high
157940	EulerOS Virtualization 3.0.6.0 : libxml2 (EulerOS-SA-2022-1082)	Nessus	Huawei Local Security Checks	2022/2/12	2023/11/9	high
175091	Amazon Linux AMI : libxml2 (ALAS-2023-1743)	Nessus	Amazon Linux Local Security Checks	2023/5/4	2024/12/11	critical
154655	Oracle MySQL Workbench < 8.0.27 Multiple Vulnerabilities (Oct 2021)	Nessus	Windows	2021/10/28	2023/11/27	high
160377	Oracle Enterprise Manager Cloud Control (Apr 2022 CPU)	Nessus	Misc.	2022/4/29	2023/10/31	critical

检测

插件搜索

high

high

high

high

high

high

critical

high

critical