An update of the libxml2 package has been released.

The remote host is affected by the vulnerability described in GLSA-202208-06 (lxml: Multiple Vulnerabilities)

  - An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling     the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute     allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS     code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
    (CVE-2021-28957)

  - lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML     Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG     files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should     upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available. (CVE-2021-43818)

  - NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only     applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not     affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the     application. The vulnerability is caused by the iterwalk function (also used by the canonicalize     function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be     replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N     would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If     untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.
    (CVE-2022-2309)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only     applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not     affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the     application. The vulnerability is caused by the iterwalk function (also used by the canonicalize     function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be     replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N     would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If     untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.
    (CVE-2022-2309)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only     applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not     affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the     application. The vulnerability is caused by the iterwalk function (also used by the canonicalize     function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be     replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N     would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If     untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.
    (CVE-2022-2309)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-034 advisory.

    There's a flaw in python-lxml's HTML Cleaner component, which is responsible for sanitizing HTML and     Javascript. An attacker who is able to submit a crafted payload to a web service using python-lxml's HTML     Cleaner may be able to trigger script execution in clients such as web browsers. This can occur because     the HTML Cleaner did not remove scripts within SVG images in data URLs such as <img src=>. XSS can result     in impacts to the integrity and availability of the web page, as well as a potential impact to data     confidentiality in some circumstances. (CVE-2021-43818)

    NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only     applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not     affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the     application. The vulnerability is caused by the iterwalk function (also used by the canonicalize     function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be     replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N     would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If     untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.
    (CVE-2022-2309)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8226 advisory.

  - NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only     applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not     affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the     application. The vulnerability is caused by the iterwalk function (also used by the canonicalize     function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be     replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N     would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If     untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.
    (CVE-2022-2309)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779225366 advisory.

  - NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only     applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not     affected. It allows triggering crashes through forged input data, given a vulnerable code sequence in the     application. The vulnerability is caused by the iterwalk function (also used by the canonicalize     function). Such code shouldn't be in wide-spread use, given that parsing + iterwalk would usually be     replaced with the more efficient iterparse function. However, an XML converter that serialises to C14N     would also be vulnerable, for example, and there are legitimate use cases for this code sequence. If     untrusted input is received (also remotely) and processed via iterwalk function, a crash can be triggered.
    (CVE-2022-2309)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Tenable Nessus application running on the remote host is 10.x prior to 10.3.1. It is, therefore, affected by multiple vulnerabilities, including:

  - A use-after-free vulnerability in the doContent function in xmlparse.c in libexpat. (CVE-2022-40674)

  - A path traversal vulnerability in the locale string handling functionality of Moment.js. (CVE-2022-24785)

  - A denial of service vulnerability in the string-to-date parsing functinality in Moment.js (CVE-2022-31129)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0808 advisory.

  - The go command may execute arbitrary code at build time when using cgo. This may occur when running go     get on a malicious module, or when running any other command which builds untrusted code. This is can by     triggered by linker flags, specified via a #cgo LDFLAGS directive. Flags containing embedded spaces are     mishandled, allowing disallowed flags to be smuggled through the LDFLAGS sanitization by including them in     the argument of another flag. This only affects usage of the gccgo compiler. (CVE-2023-29405)

  - When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by     finalizing the operation with a rename from a temporary name to the final target file name.In that rename     operation, it might accidentally *widen* the permissions for the target file, leaving the updated file     accessible to more users than intended. (CVE-2022-32207)

  - decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. (CVE-2022-38900)

  - The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.
    (CVE-2022-33987)

  - Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the     name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3. (CVE-2022-37601)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
332618	Photon OS 5.0: Libxml2 PHSA-2023-5.0-91-0018	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/11/2	medium
163984	GLSA-202208-06 : lxml: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2022/8/10	2023/10/16	high
166852	EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2022-2663)	Nessus	Huawei Local Security Checks	2022/11/2	2023/10/5	high
166857	EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2022-2695)	Nessus	Huawei Local Security Checks	2022/11/2	2023/10/5	high
169389	EulerOS Virtualization 2.10.1 : python-lxml (EulerOS-SA-2022-2941)	Nessus	Huawei Local Security Checks	2022/12/28	2023/9/11	high
173072	Amazon Linux 2023 : python3-lxml (ALAS2023-2023-034)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2024/12/11	high
178867	EulerOS Virtualization 3.0.6.6 : python-lxml (EulerOS-SA-2023-2401)	Nessus	Huawei Local Security Checks	2023/7/26	2023/7/26	high
185062	Rocky Linux 9 : python-lxml (RLSA-2022:8226)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/12/22	high
361964	AlmaLinux 9.6 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (ALMALINUX9.6:CLSA-2026:1779225366)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium
166600	Tenable Nessus 10.x < 10.3.1 Multiple Vulnerabilities (TNS-2022-20)	Nessus	Misc.	2022/10/27	2026/10/30	critical
203213	Photon OS 4.0: Libxml2 PHSA-2022-4.0-0227	Nessus	PhotonOS Local Security Checks	2024/7/23	2026/11/2	medium
194928	Splunk Enterprise 8.2.0 < 8.2.12, 9.0.0 < 9.0.6, 9.1.0 < 9.1.1 (SVD-2023-0808)	Nessus	CGI abuses	2024/5/2	2024/7/29	critical

检测

插件搜索

medium

high

high

high

high

high

high

high

medium

critical

medium

critical