a. ESXi update to third-party component libxml2

   The libxml2 third-party library has been updated which addresses    multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-4008, CVE-2011-0216, CVE-2011-1944,    CVE-2011-2834, CVE-2011-3905, CVE-2011-3919 and CVE-2012-0841 to    these issues.

Double free vulnerabilities in libxml2 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression and via vectors related to XPath handling (CVE-2011-2821, CVE-2011-2834).

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149 products_id=490

The updated packages have been patched to correct these issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1749 advisory.

    The libxml2 library is a development toolbox providing the implementation     of various XML standards. One of those standards is the XML Path Language     (XPath), which is a language for addressing parts of an XML document.

    An off-by-one error, leading to a heap-based buffer overflow, was found in     the way libxml2 parsed certain XML files. A remote attacker could provide     a specially-crafted XML file that, when opened in an application linked     against libxml2, would cause the application to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2011-0216)

    An integer overflow flaw, leading to a heap-based buffer overflow, was     found in the way libxml2 parsed certain XPath expressions. If an attacker     were able to supply a specially-crafted XML file to an application using     libxml2, as well as an XPath expression for that application to run against     the crafted file, it could cause the application to crash or, possibly,     execute arbitrary code. (CVE-2011-1944)

    Multiple flaws were found in the way libxml2 parsed certain XPath     expressions. If an attacker were able to supply a specially-crafted XML     file to an application using libxml2, as well as an XPath expression for     that application to run against the crafted file, it could cause the     application to crash. (CVE-2010-4008, CVE-2010-4494, CVE-2011-2821,     CVE-2011-2834)

    Note: Red Hat does not ship any applications that use libxml2 in a way that     would allow the CVE-2011-1944, CVE-2010-4008, CVE-2010-4494, CVE-2011-2821,     and CVE-2011-2834 flaws to be exploited; however, third-party applications     may allow XPath expressions to be passed which could trigger these flaws.

    Red Hat would like to thank the Google Security Team for reporting the     CVE-2010-4008 issue. Upstream acknowledges Bui Quang Minh from Bkis as the     original reporter of CVE-2010-4008.

    This update also fixes the following bugs:

    * A number of patches have been applied to harden the XPath processing code     in libxml2, such as fixing memory leaks, rounding errors, XPath numbers     evaluations, and a potential error in encoding conversion. (BZ#732335)

    All users of libxml2 are advised to upgrade to these updated packages,     which contain backported patches to correct these issues. The desktop must     be restarted (log out, then log back in) for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The libxml2 library is a development toolbox providing the implementation of various XML standards. One of those standards is the XML Path Language (XPath), which is a language for addressing parts of an XML document.

A heap-based buffer overflow flaw was found in the way libxml2 decoded entity references with long names. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3919)

An off-by-one error, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XML files. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-0216)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XPath expressions. If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash or, possibly, execute arbitrary code.
(CVE-2011-1944)

Flaws were found in the way libxml2 parsed certain XPath expressions.
If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash. (CVE-2010-4008, CVE-2011-2834)

An out-of-bounds memory read flaw was found in libxml2. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash. (CVE-2011-3905)

Note: Red Hat does not ship any applications that use libxml2 in a way that would allow the CVE-2011-1944, CVE-2010-4008, and CVE-2011-2834 flaws to be exploited; however, third-party applications may allow XPath expressions to be passed which could trigger these flaws.

Red Hat would like to thank the Google Security Team for reporting the CVE-2010-4008 issue. Upstream acknowledges Bui Quang Minh from Bkis as the original reporter of CVE-2010-4008.

All users of libxml2 are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0016 advisory.

    The libxml2 library is a development toolbox providing the implementation     of various XML standards. One of those standards is the XML Path Language     (XPath), which is a language for addressing parts of an XML document.

    A heap-based buffer overflow flaw was found in the way libxml2 decoded     entity references with long names. A remote attacker could provide a     specially-crafted XML file that, when opened in an application linked     against libxml2, would cause the application to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2011-3919)

    An off-by-one error, leading to a heap-based buffer overflow, was found in     the way libxml2 parsed certain XML files. A remote attacker could provide a     specially-crafted XML file that, when opened in an application linked     against libxml2, would cause the application to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2011-0216)

    A flaw was found in the way libxml2 parsed certain XPath expressions. If an     attacker were able to supply a specially-crafted XML file to an application     using libxml2, as well as an XPath expression for that application to run     against the crafted file, it could cause the application to crash.
    (CVE-2011-2834)

    Note: Red Hat does not ship any applications that use libxml2 in a way that     would allow the CVE-2011-2834 flaw to be exploited; however, third-party     applications may allow XPath expressions to be passed which could trigger     this flaw.

    An out-of-bounds memory read flaw was found in libxml2. A remote attacker     could provide a specially-crafted XML file that, when opened in an     application linked against libxml2, would cause the application to crash.
    (CVE-2011-3905)

    All users of libxml2 are advised to upgrade to these updated packages,     which contain backported patches to correct these issues. The desktop must     be restarted (log out, then log back in) for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Lot of security fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

IMPORTANT NOTE: The mingw32 packages in Scientific Linux 6 will no longer be updated proactively and will be deprecated with the release of Scientific Linux 6.4. These packages were provided to support other capabilities in Scientific Linux and were not intended for direct use.
You are advised to not use these packages with immediate effect.

A heap-based buffer overflow flaw was found in the way libxml2 decoded entity references with long names. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3919)

A heap-based buffer underflow flaw was found in the way libxml2 decoded certain entities. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2012-5134)

It was found that the hashing routine used by libxml2 arrays was susceptible to predictable hash collisions. Sending a specially crafted message to an XML service could result in longer processing time, which could lead to a denial of service. To mitigate this issue, randomization has been added to the hashing function to reduce the chance of an attacker successfully causing intentional collisions.
(CVE-2012-0841)

Multiple flaws were found in the way libxml2 parsed certain XPath (XML Path Language) expressions. If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash. (CVE-2010-4008, CVE-2010-4494, CVE-2011-2821, CVE-2011-2834)

Two heap-based buffer overflow flaws were found in the way libxml2 decoded certain XML files. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-0216, CVE-2011-3102)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way libxml2 parsed certain XPath expressions. If an attacker were able to supply a specially crafted XML file to an application using libxml2, as well as an XPath expression for that application to run against the crafted file, it could cause the application to crash or, possibly, execute arbitrary code.
(CVE-2011-1944)

An out-of-bounds memory read flaw was found in libxml2. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash. (CVE-2011-3905)

The mobile device is running a version of iOS that is older than version 6.0.  Version 6.0 contains numerous security-related fixes for the following vulnerabilities :

  - Numerous memory errors exist related to handling     'TIFF', 'PNG' and 'JPEG' images and 'ImageIO' that could     allow arbitrary code execution. (CVE-2011-1167,     CVE-2011-3026, CVE-2011-3048, CVE-2011-3328,     CVE-2012-1173, CVE-2012-3726)

  - Several issues exist related to 'CoreGraphics' and     'FreeType' (CVE-2012-1126, CVE-2012-1127, CVE-2012-1128,     CVE-2012-1129, CVE-2012-1130, CVE-2012-1131,     CVE-2012-1132, CVE-2012-1133, CVE-2012-1134,     CVE-2012-1135, CVE-2012-1136, CVE-2012-1137,     CVE-2012-1138, CVE-2012-1139, CVE-2012-1140,     CVE-2012-1141, CVE-2012-1142, CVE-2012-1143,     CVE-2012-1144)

  - Numerous issues exist related to libxml and could lead     to application crashes or arbitrary code execution.
    (CVE-2011-1944, CVE-2011-2821, CVE-2011-2834,     CVE-2011-3919)

  - A stack-based buffer overflow exists related to 'locale     ID' and 'International Components for Unicode' (ICU).
    (CVE-2011-4599)

  - An unitialized memory access issue exists related to     'Sorenson' encoded movie files and 'CoreMedia'.
    (CVE-2012-3722)

  - An URL handling issue exists related to 'CFNetwork'     that can disclose sensitive information. (CVE-2012-3724)

  - The 'DNAv4' protocol discloses sensitive information     when connecting to unencrypted WiFi networks.
    (CVE-2012-3725)

  - A buffer overflow error exists related to 'IPSec' and     'racoon' configuration files. (CVE-2012-3727)

  - An invalid pointer dereference error exists related to     the kernel and packet filter ioctls. (CVE-2012-3728)

  - An uninitialized memory access error exists related to     the kernel and the Berkeley Packet Filter interpreter.
    (CVE-2012-3729)

  - Several issues exist related to 'Mail' and the handling     of attachments and 'S/MIME' signed messages.
    (CVE-2012-3730, CVE-2012-3731, CVE-2012-3732)

  - Information disclosure issues exist related to     'Messages', 'Office Viewer', system logs, and 'UIKit'.
    (CVE-2012-3733, CVE-2012-3734, CVE-2012-3743,     CVE-2012-3746)

  - Memory corruption errors exist related to 'OpenGL'.
    (CVE-2011-3457)

  - Numerous errors exist related to 'Passcode Lock'.
    (CVE-2012-3735, CVE-2012-3736, CVE-2012-3737,     CVE-2012-3738, CVE-2012-3739, CVE-2012-3740)

  - An error exists in 'Restrictions' that could allow     unauthorized purchases. (CVE-2012-3741)

  - Errors exist in 'Safari' that are related to misleading     URL characters and password auto complete.
    (CVE-2012-3742, CVE-2012-0680)

  - A buffer overflow error exists related to 'Telephony'     and SMS handling. (CVE-2012-3745)

  - Many errors exist related to the bundled 'WebKit'     components. (CVE-2011-2845, CVE-2011-3016,     CVE-2011-3021, CVE-2011-3027, CVE-2011-3032,     CVE-2011-3034, CVE-2011-3035, CVE-2011-3036,     CVE-2011-3037, CVE-2011-3038, CVE-2011-3039,     CVE-2011-3040, CVE-2011-3041, CVE-2011-3042,     CVE-2011-3043, CVE-2011-3044, CVE-2011-3050,     CVE-2011-3053, CVE-2011-3059, CVE-2011-3060,     CVE-2011-3064, CVE-2011-3067, CVE-2011-3068,     CVE-2011-3069, CVE-2011-3071, CVE-2011-3073,     CVE-2011-3074, CVE-2011-3075, CVE-2011-3076,     CVE-2011-3078, CVE-2011-3081, CVE-2011-3086,     CVE-2011-3089, CVE-2011-3090, CVE-2011-3105,     CVE-2011-3913, CVE-2011-3924, CVE-2011-3926,     CVE-2011-3958, CVE-2011-3966, CVE-2011-3968,     CVE-2011-3969, CVE-2011-3971, CVE-2012-0682,     CVE-2012-0683, CVE-2012-1520, CVE-2012-1521,     CVE-2012-2815, CVE-2012-2818, CVE-2012-3589,     CVE-2012-3590, CVE-2012-3591, CVE-2012-3592,     CVE-2012-3593, CVE-2012-3594, CVE-2012-3595,     CVE-2012-3596, CVE-2012-3597, CVE-2012-3598,     CVE-2012-3599, CVE-2012-3600, CVE-2012-3601,     CVE-2012-3602, CVE-2012-3603, CVE-2012-3604,     CVE-2012-3605, CVE-2012-3608, CVE-2012-3609,     CVE-2012-3610, CVE-2012-3611, CVE-2012-3612,     CVE-2012-3613, CVE-2012-3614, CVE-2012-3615,     CVE-2012-3617, CVE-2012-3618, CVE-2012-3620,     CVE-2012-3624, CVE-2012-3625, CVE-2012-3626,     CVE-2012-3627, CVE-2012-3628, CVE-2012-3629,     CVE-2012-3630, CVE-2012-3631, CVE-2012-3633,     CVE-2012-3634, CVE-2012-3635, CVE-2012-3636,     CVE-2012-3637, CVE-2012-3638, CVE-2012-3639,     CVE-2012-3640, CVE-2012-3641, CVE-2012-3642,     CVE-2012-3644, CVE-2012-3645, CVE-2012-3646,     CVE-2012-3647, CVE-2012-3648, CVE-2012-3650,     CVE-2012-3651, CVE-2012-3652, CVE-2012-3653,     CVE-2012-3655, CVE-2012-3656, CVE-2012-3658,     CVE-2012-3659, CVE-2012-3660, CVE-2012-3661,     CVE-2012-3663, CVE-2012-3664, CVE-2012-3665,     CVE-2012-3666, CVE-2012-3667, CVE-2012-3668,     CVE-2012-3669, CVE-2012-3670, CVE-2012-3671,     CVE-2012-3672, CVE-2012-3673, CVE-2012-3674,     CVE-2012-3676, CVE-2012-3677, CVE-2012-3678,     CVE-2012-3679, CVE-2012-3680, CVE-2012-3681,     CVE-2012-3682, CVE-2012-3683, CVE-2012-3684,     CVE-2012-3686, CVE-2012-3691, CVE-2012-3693,     CVE-2012-3695, CVE-2012-3696, CVE-2012-3703,     CVE-2012-3704, CVE-2012-3706, CVE-2012-3708,     CVE-2012-3710, CVE-2012-3747)

Specially crafted XPath expressions could have allowed attackers to cause a denial of service or possibly have unspecified other impact (CVE-2011-2821 / CVE-2011-2834). This has been fixed.

An updated rhev-hypervisor5 package that fixes several security issues and various bugs is now available.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The rhev-hypervisor5 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent.

Note: Red Hat Enterprise Virtualization Hypervisor is only available for the Intel 64 and AMD64 architectures with virtualization extensions.

A heap overflow flaw was found in the way QEMU-KVM emulated the e1000 network interface card. A privileged guest user in a virtual machine whose network interface is configured to use the e1000 emulated driver could use this flaw to crash the host or, possibly, escalate their privileges on the host. (CVE-2012-0029)

A divide-by-zero flaw was found in the Linux kernel's igmp_heard_query() function. An attacker able to send certain IGMP (Internet Group Management Protocol) packets to a target system could use this flaw to cause a denial of service. (CVE-2012-0207)

A double free flaw was discovered in the policy checking code in OpenSSL. A remote attacker could use this flaw to crash an application that uses OpenSSL by providing an X.509 certificate that has specially crafted policy extension data. (CVE-2011-4109)

An information leak flaw was found in the SSL 3.0 protocol implementation in OpenSSL. Incorrect initialization of SSL record padding bytes could cause an SSL client or server to send a limited amount of possibly sensitive data to its SSL peer via the encrypted connection. (CVE-2011-4576)

It was discovered that OpenSSL did not limit the number of TLS/SSL handshake restarts required to support Server Gated Cryptography. A remote attacker could use this flaw to make a TLS/SSL server using OpenSSL consume an excessive amount of CPU by continuously restarting the handshake. (CVE-2011-4619)

Red Hat would like to thank Nicolae Mogoreanu for reporting CVE-2012-0029, and Simon McVittie for reporting CVE-2012-0207.

This updated package provides updated components that include fixes for various security issues. These issues have no security impact on Red Hat Enterprise Virtualization Hypervisor itself, however. The security fixes included in this update address the following CVE numbers :

CVE-2006-1168 and CVE-2011-2716 (busybox issues)

CVE-2009-5029, CVE-2009-5064, CVE-2010-0830 and CVE-2011-1089 (glibc issues)

CVE-2011-1083, CVE-2011-3638, CVE-2011-4086, CVE-2011-4127 and CVE-2012-0028 (kernel issues)

CVE-2011-1526 (krb5 issue)

CVE-2011-4347 (kvm issue)

CVE-2010-4008, CVE-2011-0216, CVE-2011-2834, CVE-2011-3905, CVE-2011-3919 and CVE-2011-1944 (libxml2 issues)

CVE-2011-1749 (nfs-utils issue)

CVE-2011-4108 (openssl issue)

CVE-2011-0010 (sudo issue)

CVE-2011-1675 and CVE-2011-1677 (util-linux issues)

CVE-2010-0424 (vixie-cron issue)

This updated rhev-hypervisor5 package fixes various bugs.
Documentation of these changes will be available shortly in the Technical Notes document :

https://docs.redhat.com/docs/en-US/ Red_Hat_Enterprise_Virtualization_for_Servers/2.2/html/Technical_Notes / index.html

Users of Red Hat Enterprise Virtualization Hypervisor are advised to upgrade to this updated package, which fixes these issues.

It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2011-0216)

It was discovered that libxml2 is vulnerable to double-free conditions when parsing certain XML documents. This could allow a remote attacker to cause a denial of service. (CVE-2011-2821, CVE-2011-2834)

It was discovered that libxml2 did not properly detect end of file when parsing certain XML documents. An attacker could exploit this to crash applications linked against libxml2. (CVE-2011-3905)

It was discovered that libxml2 did not properly decode entity references with long names. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
(CVE-2011-3919).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0217 advisory.

    These packages provide the libxml2 library, a development toolbox providing     the implementation of various XML standards, for users of MinGW (Minimalist     GNU for Windows).

    IMPORTANT NOTE: The mingw32 packages in Red Hat Enterprise Linux 6 will no     longer be updated proactively and will be deprecated with the release of     Red Hat Enterprise Linux 6.4. These packages were provided to support other     capabilities in Red Hat Enterprise Linux and were not intended for direct     customer use. Customers are advised to not use these packages with     immediate effect. Future updates to these packages will be at Red Hat's     discretion and these packages may be removed in a future minor release.

    A heap-based buffer overflow flaw was found in the way libxml2 decoded     entity references with long names. A remote attacker could provide a     specially-crafted XML file that, when opened in an application linked     against libxml2, would cause the application to crash or, potentially,     execute arbitrary code with the privileges of the user running the     application. (CVE-2011-3919)

    A heap-based buffer underflow flaw was found in the way libxml2 decoded     certain entities. A remote attacker could provide a specially-crafted XML     file that, when opened in an application linked against libxml2, would     cause the application to crash or, potentially, execute arbitrary code with     the privileges of the user running the application. (CVE-2012-5134)

    It was found that the hashing routine used by libxml2 arrays was     susceptible to predictable hash collisions. Sending a specially-crafted     message to an XML service could result in longer processing time, which     could lead to a denial of service. To mitigate this issue, randomization     has been added to the hashing function to reduce the chance of an attacker     successfully causing intentional collisions. (CVE-2012-0841)

    Multiple flaws were found in the way libxml2 parsed certain XPath (XML Path     Language) expressions. If an attacker were able to supply a     specially-crafted XML file to an application using libxml2, as well as an     XPath expression for that application to run against the crafted file, it     could cause the application to crash. (CVE-2010-4008, CVE-2010-4494,     CVE-2011-2821, CVE-2011-2834)

    Two heap-based buffer overflow flaws were found in the way libxml2 decoded     certain XML files. A remote attacker could provide a specially-crafted XML     file that, when opened in an application linked against libxml2, would     cause the application to crash or, potentially, execute arbitrary code with     the privileges of the user running the application. (CVE-2011-0216,     CVE-2011-3102)

    An integer overflow flaw, leading to a heap-based buffer overflow, was     found in the way libxml2 parsed certain XPath expressions. If an attacker     were able to supply a specially-crafted XML file to an application using     libxml2, as well as an XPath expression for that application to run against     the crafted file, it could cause the application to crash or, possibly,     execute arbitrary code. (CVE-2011-1944)

    An out-of-bounds memory read flaw was found in libxml2. A remote attacker     could provide a specially-crafted XML file that, when opened in an     application linked against libxml2, would cause the application to crash.
    (CVE-2011-3905)

    Red Hat would like to thank the Google Security Team for reporting the     CVE-2010-4008 issue. Upstream acknowledges Bui Quang Minh from Bkis as the     original reporter of CVE-2010-4008.

    All users of mingw32-libxml2 are advised to upgrade to these updated     packages, which contain backported patches to correct these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote VMware ESX / ESXi host is affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist in     the bundled libxml2 library in the     xmlXPathNextPrecedingSibling(), xmlNodePtr(), and     xmlXPathNextPrecedingInternal() functions due to     improper processing of namespaces and attributes nodes.
    A remote attacker can exploit these, via a specially     crafted XML file, to cause a denial of service condition     or the execution of arbitrary code. (CVE-2010-4008)

  - Multiple remote code execution vulnerabilities exist in     the bundled libxml2 library in the     xmlCharEncFirstLineInt() and xmlCharEncInFunc()     functions due to an off-by-one overflow condition. A     remote attacker can exploit these, via a specially     crafted XML file, to cause a denial of service condition     or the execution of arbitrary code. (CVE-2011-0216)

  - A remote code execution vulnerability exists in the     bundled libxml2 library due to improper sanitization of     user-supplied input when processing an XPath nodeset. A     remote attacker can exploit this, via a specially     crafted request, to cause a heap-based buffer overflow,     resulting in a denial of service condition or the     execution of arbitrary code. (CVE-2011-1944)

  - A remote code execution vulnerability exists in the     bundled libxml2 library in the xmlXPathCompOpEval()     function due to improper processing of invalid XPath     expressions. A remote attacker can exploit this, via a     specially crafted XSLT stylesheet, to cause a denial of     service condition or the execution of arbitrary code.     (CVE-2011-2834)

  - A denial of service vulnerability exists in the bundled     libxml2 library due to multiple out-of-bounds read     errors in parser.c that occur when getting a Stop order.
    A remote attacker can exploit this, via a specially     crafted XML document, to cause a denial of service     condition. (CVE-2011-3905)

  - A remote code execution vulnerability exists in the     bundled libxml2 library in the     xmlStringLenDecodeEntities() function in parser.c due     to an overflow condition that occurs when copying     entities. A remote attacker can exploit this, via a     specially crafted request, to cause a heap-based buffer     overflow, resulting in a denial of service condition or     the execution of arbitrary code. (CVE-2011-3919)

  - A denial of service vulnerability exists in the bundled     libxml2 library due to improper processing of crafted     parameters. A remote attacker can exploit this to cause     a hash collision, resulting in a denial of service     condition. (CVE-2012-0841)

According to the web server's banner, the version of HP System Management Homepage (SMH) hosted on the remote host is earlier than 7.1.1 and is, therefore, reportedly affected by the following vulnerabilities :

  - The bundled version of the libxml2 library contains     multiple vulnerabilities. (CVE-2011-1944, CVE-2011-2821,     CVE-2011-2834)

  - The bundled version of PHP contains multiple     vulnerabilities. (CVE-2011-3379, CVE-2011-4153,     CVE-2011-4885, CVE-2012-1823, CVE-2012-0057,     CVE-2012-0830)

  - The bundled version of the Apache HTTP Server contains     multiple vulnerabilities. (CVE-2011-3607, CVE-2011-4317,     CVE-2011-4415, CVE-2012-0021, CVE-2012-0031,     CVE-2012-0053)

  - An issue exists in the 'include/iniset.php' script in     the embedded RoundCube Webmail version that could lead     to a denial of service. (CVE-2011-4078)

  - The bundled version of OpenSSL contains multiple     vulnerabilities. (CVE-2011-4108, CVE-2011-4576,     CVE-2011-4577, CVE-2011-4619, CVE-2012-0027,     CVE-2012-1165)

  - The bundled version of curl and libcurl does not     properly consider special characters during extraction     of a pathname from a URL. (CVE-2012-0036)     
  - An off autocomplete attribute does not exist for     unspecified form fields, which makes it easier for     remote attackers to obtain access by leveraging an     unattended workstation. (CVE-2012-2012)

  - An unspecified vulnerability exists that could allow a     remote attacker to cause a denial of service, or     possibly obtain sensitive information or modify data.
    (CVE-2012-2013)

  - An unspecified vulnerability exists related to improper     input validation. (CVE-2012-2014)

  - An unspecified vulnerability allows remote,     unauthenticated users to gain privileges and obtain     sensitive information. (CVE-2012-2015)

  - An unspecified vulnerability allows local users to     obtain sensitive information via unknown vectors.
    (CVE-2012-2016)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1749 advisory.

    - Fixes another XPath problem CVE-2011-2834
    - Fix a potential crasher in XPath or XSLT, CVE-2011-1944

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
59966	VMSA-2012-0012 : VMware ESXi update to third-party library	Nessus	VMware ESX Local Security Checks	2012/7/13	2021/1/6	high
56429	Mandriva Linux Security Advisory : libxml2 (MDVSA-2011:145)	Nessus	Mandriva Local Security Checks	2011/10/10	2021/1/6	high
57022	RHEL 6 : libxml2 (RHSA-2011:1749)	Nessus	Red Hat Local Security Checks	2011/12/6	2025/4/14	critical
57487	CentOS 5 : libxml2 (CESA-2012:0017)	Nessus	CentOS Local Security Checks	2012/1/12	2021/1/4	high
57491	RHEL 4 : libxml2 (RHSA-2012:0016)	Nessus	Red Hat Local Security Checks	2012/1/12	2024/11/4	critical
62323	Fedora 17 : libxml2-2.7.8-9.fc17 (2012-13820)	Nessus	Fedora Local Security Checks	2012/9/27	2021/1/11	high
64425	Scientific Linux Security Update : mingw32-libxml2 on SL6.x (x86_64) (20130131)	Nessus	Scientific Linux Local Security Checks	2013/2/4	2021/1/14	high
62242	Apple iOS < 6.0 Multiple Vulnerabilities	Nessus	Mobile Devices	2012/9/24	2026/10/29	critical
57531	SuSE 11.1 Security Update : libxml2 (SAT Patch Number 5489)	Nessus	SuSE Local Security Checks	2012/1/13	2021/1/19	high
79283	RHEL 5 : rhev-hypervisor5 (RHSA-2012:0168)	Nessus	Red Hat Local Security Checks	2014/11/17	2021/1/14	high
57615	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libxml2 vulnerabilities (USN-1334-1)	Nessus	Ubuntu Local Security Checks	2012/1/20	2019/9/19	high
64391	RHEL 6 : mingw32-libxml2 (RHSA-2013:0217)	Nessus	Red Hat Local Security Checks	2013/2/1	2025/4/15	critical
89037	VMware ESX / ESXi libxml2 Multiple Vulnerabilities (VMSA-2012-0012) (remote check)	Nessus	Misc.	2016/2/29	2021/1/6	high
59851	HP System Management Homepage < 7.1.1 Multiple Vulnerabilities	Nessus	Web Servers	2012/7/5	2022/4/11	critical
181103	Oracle Linux 6 : libxml2 (ELSA-2011-1749)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	critical

检测

插件搜索

high

high

critical

high

critical

high

high

critical

high

high

high

critical

high

critical

critical