The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libxml2: Use after free via namespace node in XPointer ranges (CVE-2016-4658)

  - libxml2: Missing validation for external entities in xmlParsePEReference (CVE-2017-7375)

  - libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer     uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote attackers to     cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read     arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be     argued that because libxml2 already provides the ability to disable external entity expansion, the     responsibility for resolving this issue lies with application developers; according to this argument, this     entry should be REJECTed and each affected application would need its own CVE. (CVE-2013-0339)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.(CVE-2015-8242)

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.(CVE-2015-7500)

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.(CVE-2015-8317)

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.(CVE-2015-7497)

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.(CVE-2015-7498)

A denial of service flaw was found in the way the libxml2 library parsed certain XML files. An attacker could provide a specially crafted XML file that, when parsed by an application using libxml2, could cause that application to use an excessive amount of memory.(CVE-2015-1819)

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.(CVE-2015-7941)

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.(CVE-2015-7499)

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.(CVE-2015-8241)

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU.(CVE-2015-5312)

A heap-based buffer overflow flaw was found in the way libxml2 parsed certain crafted XML input. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash causing a denial of service.(CVE-2015-7942)

It was discovered that libxml2 could access out-of-bounds memory when parsing unclosed HTML comments. A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose heap memory contents.(CVE-2015-8710)

The remote host is missing AIX PTF U870330, which is related to the security of the package bos.rte.control.

Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseEntityDecl or xmlParseConditionalSections function. By using a specially crafted XML data, a remote attacker could exploit this vulnerability to trigger an out-of-bounds read and cause the system to crash. Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseConditionalSections function. By using a specially crafted XML data, a remote attacker could exploit this vulnerability to trigger an out-of-bounds read and cause the system to crash. libxml2 is vulnerable to a buffer overflow, caused by improper bounds checking by the XML parser in xmlNextChar. By using a malformed XML file, a local attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

The remote host is missing AIX PTF U868931, which is related to the security of the package bos.rte.control.

Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseEntityDecl or xmlParseConditionalSections function. By using a specially crafted XML data, a remote attacker could exploit this vulnerability to trigger an out-of-bounds read and cause the system to crash. Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseConditionalSections function. By using a specially crafted XML data, a remote attacker could exploit this vulnerability to trigger an out-of-bounds read and cause the system to crash. libxml2 is vulnerable to a buffer overflow, caused by improper bounds checking by the XML parser in xmlNextChar. By using a malformed XML file, a local attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

The remote host is missing AIX PTF U866671, which is related to the security of the package bos.rte.control.

Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseEntityDecl or xmlParseConditionalSections function. By using a specially crafted XML data, a remote attacker could exploit this vulnerability to trigger an out-of-bounds read and cause the system to crash. Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseConditionalSections function. By using a specially crafted XML data, a remote attacker could exploit this vulnerability to trigger an out-of-bounds read and cause the system to crash. libxml2 is vulnerable to a buffer overflow, caused by improper bounds checking by the XML parser in xmlNextChar. By using a malformed XML file, a local attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

The remote AIX host has a version of libxml2 installed that is affected by the following vulnerabilities :

  - A heap-based buffer overflow condition exists in the     xmlParseEntityDecl() and xmlParseConditionalSections()     functions within file parser.c due to a failure to     properly stop parsing invalid input. An unauthenticated,     remote attacker can exploit this, via specially crafted     XML data, to cause a denial of service condition or     potentially disclose sensitive memory contents.
    (CVE-2015-7941)

  - A heap-based buffer overflow condition exists in the     xmlParseConditionalSections() function within file     parser.c due to not properly skipping intermediary     entities. An unauthenticated, remote attacker can     exploit this, via specially crafted XML data, to cause a     denial of service condition. (CVE-2015-7942)

  - A buffer overflow condition exists in the xmlNextChar()     function due to improper bounds checking. A local     attacker can exploit this, via a malformed XML file, to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2015-8241)

CVE-2015-5312 The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.

CVE-2015-7497 Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.

CVE-2015-7498 Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

CVE-2015-7499 Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

CVE-2015-7500 The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

CVE-2015-7941 libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.

CVE-2015-7942 The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

CVE-2015-8241 The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

CVE-2015-8242 The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

CVE-2015-8317 The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.

- security update: This update fixes the following     security issues :

  - CVE-2015-1819 Enforce the reader to run in constant     memory [bnc#928193]

  - CVE-2015-7941 Fix out of bound read with crafted xml     input by stopping parsing on entities boundaries errors     [bnc#951734]

  - CVE-2015-7942 Fix another variation of overflow in     Conditional sections [bnc#951735]

  - CVE-2015-8241 Avoid extra processing of MarkupDecl when     EOF [bnc#956018]

  - CVE-2015-8242 Buffer overead with HTML parser in push     mode [bnc#956021]

  - CVE-2015-8317 Return if the encoding declaration is     broken or encoding conversion failed [bnc#956260]

  - CVE-2015-5312 Fix another entity expansion issue     [bnc#957105]

  - CVE-2015-7497 Avoid an heap buffer overflow in     xmlDictComputeFastQKey [bnc#957106]

  - CVE-2015-7498 Processes entities after encoding     conversion failures [bnc#957107]

  - CVE-2015-7499 Add xmlHaltParser() to stop the parser /     Detect incoherency on GROW [bnc#957109]

  - CVE-2015-8317 Multiple out-of-bound read could lead to     denial of service [bnc#956260]

  - CVE-2015-8035 DoS when parsing specially crafted XML     document if XZ support is enabled [bnc#954429]

  - CVE-2015-7500 Fix memory access error due to incorrect     entities boundaries [bnc#957110] This update was     imported from the SUSE:SLE-12:Update update project.

- security update: This update fixes the following     security issues :

  - CVE-2015-1819 Enforce the reader to run in constant     memory [bnc#928193]

  - CVE-2015-7941 Fix out of bound read with crafted xml     input by stopping parsing on entities boundaries errors     [bnc#951734]

  - CVE-2015-7942 Fix another variation of overflow in     Conditional sections [bnc#951735]

  - CVE-2015-8241 Avoid extra processing of MarkupDecl when     EOF [bnc#956018]

  - CVE-2015-8242 Buffer overead with HTML parser in push     mode [bnc#956021]

  - CVE-2015-8317 Return if the encoding declaration is     broken or encoding conversion failed [bnc#956260]

  - CVE-2015-5312 Fix another entity expansion issue     [bnc#957105]

  - CVE-2015-7497 Avoid an heap buffer overflow in     xmlDictComputeFastQKey [bnc#957106]

  - CVE-2015-7498 Processes entities after encoding     conversion failures [bnc#957107]

  - CVE-2015-7499 Add xmlHaltParser() to stop the parser /     Detect incoherency on GROW [bnc#957109]

  - CVE-2015-8317 Multiple out-of-bound read could lead to     denial of service [bnc#956260]

  - CVE-2015-8035 DoS when parsing specially crafted XML     document if XZ support is enabled [bnc#954429]

  - CVE-2015-7500 Fix memory access error due to incorrect     entities boundaries [bnc#957110]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes the following security issues :

  - CVE-2015-1819 Enforce the reader to run in constant     memory [bnc#928193]

  - CVE-2015-7941 Fix out of bound read with crafted xml     input by stopping parsing on entities boundaries errors     [bnc#951734]

  - CVE-2015-7942 Fix another variation of overflow in     Conditional sections [bnc#951735]

  - CVE-2015-8241 Avoid extra processing of MarkupDecl when     EOF [bnc#956018]

  - CVE-2015-8242 Buffer overead with HTML parser in push     mode [bnc#956021]

  - CVE-2015-8317 Return if the encoding declaration is     broken or encoding conversion failed [bnc#956260]

  - CVE-2015-5312 Fix another entity expansion issue     [bnc#957105]

  - CVE-2015-7497 Avoid an heap buffer overflow in     xmlDictComputeFastQKey [bnc#957106]

  - CVE-2015-7498 Processes entities after encoding     conversion failures [bnc#957107]

  - CVE-2015-7499 Add xmlHaltParser() to stop the parser /     Detect incoherency on GROW [bnc#957109]

  - CVE-2015-7500 Fix memory access error due to incorrect     entities boundaries [bnc#957110]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- update to 2.9.3

  - full changelog: http://www.xmlsoft.org/news.html

  - fixed CVEs: CVE-2015-8242, CVE-2015-7500, CVE-2015-7499,     CVE-2015-5312, CVE-2015-7497, CVE-2015-7498,     CVE-2015-8035, CVE-2015-7942, CVE-2015-1819,     CVE-2015-7941, CVE-2014-3660, CVE-2014-0191,     CVE-2015-8241, CVE-2015-8317

  - fixed bugs: [bsc#928193], [bsc#951734], [bsc#951735],     [bsc#954429], [bsc#956018], [bsc#956021], [bsc#956260],     [bsc#957105], [bsc#957106], [bsc#957107], [bsc#957109],     [bsc#957110]

Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or crash the application.

Several denial of service flaws were found in libxml2, a library providing support for reading, modifying, and writing XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or in certain cases crash the application.
(CVE-2015-1819, CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500 CVE-2015-7941, CVE-2015-7942, CVE-2015-8241, CVE-2015-8242, CVE-2015-8317, BZ#1213957, BZ#1281955)

The desktop must be restarted (log out, then log back in) for this update to take effect.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2834-1 advisory.

    Kostya Serebryany discovered that libxml2 incorrectly handled certain malformed documents. If a user or     automated system were tricked into opening a specially crafted document, an attacker could possibly cause     libxml2 to crash, resulting in a denial of service. (CVE-2015-5312, CVE-2015-7497, CVE-2015-7498,     CVE-2015-7499,CVE-2015-7500)

    Hugh Davenport discovered that libxml2 incorrectly handled certain malformed documents. If a user or     automated system were tricked into opening a specially crafted document, an attacker could possibly cause     libxml2 to crash, resulting in a denial of service. (CVE-2015-8241, CVE-2015-8242)

    Hanno Boeck discovered that libxml2 incorrectly handled certain malformed documents. If a user or     automated system were tricked into opening a specially crafted document, an attacker could possibly cause     libxml2 to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS, Ubuntu     14.04 LTS and Ubuntu 15.04. (CVE-2015-8317)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A denial of service flaw was found in the way the libxml2 library parsed certain XML files. An attacker could provide a specially crafted XML file that, when parsed by an application using libxml2, could cause that application to use an excessive amount of memory.

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941 .

libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.

A heap-based buffer overflow vulnerability was found in xmlDictComputeFastQKey in dict.c.

A heap-based buffer overflow read in xmlParseMisc was found.

A heap-based buffer overflow was found in xmlGROW allowing the attacker to read the memory out of bounds.

A buffer overread in xmlNextChar was found, causing segmentation fault when compiled with ASAN.

Heap-based buffer overflow was found in xmlParseXmlDecl. When conversion failure happens, parser continues to extract more errors which may lead to unexpected behaviour.

Stack-based buffer overread vulnerability with HTML parser in push mode in xmlSAX2TextNode causing segmentation fault when compiled with ASAN.

A vulnerability in libxml2 was found causing DoS by exhausting CPU when parsing specially crafted XML document.

An out-of-bounds heap read in xmlParseXMLDecl happens when a file containing unfinished xml declaration.

Several denial of service flaws were found in libxml2, a library providing support for reading, modifying, and writing XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or in certain cases crash the application.
(CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500 CVE-2015-7941, CVE-2015-7942, CVE-2015-8241, CVE-2015-8242, CVE-2015-8317, BZ#1213957, BZ#1281955)

The desktop must be restarted (log out, then log back in) for this update to take effect.

Updated libxml2 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Several denial of service flaws were found in libxml2, a library providing support for reading, modifying, and writing XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or in certain cases crash the application.
(CVE-2015-1819, CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500 CVE-2015-7941, CVE-2015-7942, CVE-2015-8241, CVE-2015-8242, CVE-2015-8317, BZ#1213957, BZ#1281955)

Red Hat would like to thank the GNOME project for reporting CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500, CVE-2015-8241, CVE-2015-8242, and CVE-2015-8317. Upstream acknowledges Kostya Serebryany of Google as the original reporter of CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, and CVE-2015-7500; Hugh Davenport as the original reporter of CVE-2015-8241 and CVE-2015-8242; and Hanno Boeck as the original reporter of CVE-2015-8317. The CVE-2015-1819 issue was discovered by Florian Weimer of Red Hat Product Security.

All libxml2 users are advised to upgrade to these updated packages, which contain a backported patch to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2549 advisory.

    The libxml2 library is a development toolbox providing the implementation     of various XML standards.

    Several denial of service flaws were found in libxml2, a library providing     support for reading, modifying, and writing XML and HTML files. A remote     attacker could provide a specially crafted XML or HTML file that, when     processed by an application using libxml2, would cause that application to     use an excessive amount of CPU, leak potentially sensitive information, or     in certain cases crash the application. (CVE-2015-5312, CVE-2015-7497,     CVE-2015-7498, CVE-2015-7499, CVE-2015-7500 CVE-2015-7941, CVE-2015-7942,     CVE-2015-8241, CVE-2015-8242, CVE-2015-8317, BZ#1213957, BZ#1281955)

    Red Hat would like to thank the GNOME project for reporting CVE-2015-7497,     CVE-2015-7498, CVE-2015-7499, CVE-2015-7500, CVE-2015-8241, CVE-2015-8242,     and CVE-2015-8317. Upstream acknowledges Kostya Serebryany of Google as the     original reporter of CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, and     CVE-2015-7500; Hugh Davenport as the original reporter of CVE-2015-8241 and     CVE-2015-8242; and Hanno Boeck as the original reporter of CVE-2015-8317.

    All libxml2 users are advised to upgrade to these updated packages, which     contain a backported patch to correct these issues. The desktop must be     restarted (log out, then log back in) for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2550 advisory.

    - CVE-2015-7941 Stop parsing on entities boundaries errors
    - CVE-2015-7941 Cleanup conditional section error handling
    - CVE-2015-8317 Fail parsing early on if encoding conversion failed
    - CVE-2015-7942 Another variation of overflow in Conditional sections
    - CVE-2015-7942 Fix an error in previous Conditional section patch
    - CVE-2015-7498 Avoid processing entities after encoding conversion failures
    - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
    - CVE-2015-5312 Another entity expansion issue
    - CVE-2015-7499 Add xmlHaltParser() to stop the parser
    - CVE-2015-7499 Detect incoherency on GROW
    - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
    - CVE-2015-8242 Buffer overead with HTML parser in push mode
    - CVE-2015-1819 Enforce the reader to run in constant memory
    - Fix missing entities after CVE-2014-3660 fix
    - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
    - Fix regressions introduced by CVE-2014-0191 patch

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2549 advisory.

    - CVE-2015-7941 Cleanup conditional section error handling
    - CVE-2015-8317 Fail parsing early on if encoding conversion failed
    - CVE-2015-7942 Another variation of overflow in Conditional sections
    - CVE-2015-7942 Fix an error in previous Conditional section patch
    - CVE-2015-7498 Avoid processing entities after encoding conversion failures
    - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
    - CVE-2015-5312 Another entity expansion issue
    - CVE-2015-7499 Add xmlHaltParser() to stop the parser
    - CVE-2015-7499 Detect incoherency on GROW
    - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
    - CVE-2015-8242 Buffer overead with HTML parser in push mode

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated libxml2 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Several denial of service flaws were found in libxml2, a library providing support for reading, modifying, and writing XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or in certain cases crash the application.
(CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500 CVE-2015-7941, CVE-2015-7942, CVE-2015-8241, CVE-2015-8242, CVE-2015-8317, BZ#1213957, BZ#1281955)

Red Hat would like to thank the GNOME project for reporting CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500, CVE-2015-8241, CVE-2015-8242, and CVE-2015-8317. Upstream acknowledges Kostya Serebryany of Google as the original reporter of CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, and CVE-2015-7500; Hugh Davenport as the original reporter of CVE-2015-8241 and CVE-2015-8242; and Hanno Boeck as the original reporter of CVE-2015-8317.

All libxml2 users are advised to upgrade to these updated packages, which contain a backported patch to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect.

CVE-2015-8241 Buffer overread with XML parser in xmlNextChar

CVE-2015-8317

  - issues in the xmlParseXMLDecl function: If we fail     conversing the current input stream while processing the     encoding declaration of the XMLDecl then it's safer to     just abort there and not try to report further errors.

  - If the string is not properly terminated do not try to     convert to the given encoding.

Additional fix for off by one error in previous patch for CVE-2015-7942 (thanks to Salvatore for spotting this)

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

reports :

CVE-2015-5312 Another entity expansion issue (David Drysdale).

CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey (David Drysdale).

CVE-2015-7498 Avoid processing entities after encoding conversion failures (Daniel Veillard).

CVE-2015-7499 (1) Add xmlHaltParser() to stop the parser (Daniel Veillard).

CVE-2015-7499 (2) Detect incoherency on GROW (Daniel Veillard).

CVE-2015-7500 Fix memory access error due to incorrect entities boundaries (Daniel Veillard).

CVE-2015-7941 (1) Stop parsing on entities boundaries errors (Daniel Veillard).

CVE-2015-7941 (2) Cleanup conditional section error handling (Daniel Veillard).

CVE-2015-7942 Another variation of overflow in Conditional sections (Daniel Veillard).

CVE-2015-7942 (2) Fix an error in previous Conditional section patch (Daniel Veillard).

CVE-2015-8035 Fix XZ compression support loop (Daniel Veillard).

CVE-2015-8242 Buffer overead with HTML parser in push mode (Hugh Davenport)

ID	Name	Product	Family	Severity
198481	RHEL 5 : libxml2 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	critical
125603	Amazon Linux 2 : libxml2 (ALAS-2019-1220)	Nessus	Amazon Linux Local Security Checks	critical
91237	AIX 7.2 : bos.rte.control (U870330)	Nessus	AIX Local Security Checks	medium
91234	AIX 7.1 TL 4 : bos.rte.control (U868931)	Nessus	AIX Local Security Checks	medium
91233	AIX 6.1 TL 9 : bos.rte.control (U866671)	Nessus	AIX Local Security Checks	medium
88885	AIX 5.3 TL 12 : libxml2 (IV80617)	Nessus	AIX Local Security Checks	medium
88884	AIX 7.2 TL 0 : libxml2 (IV80616)	Nessus	AIX Local Security Checks	medium
88883	AIX 6.1 TL 9 : libxml2 (IV80588)	Nessus	AIX Local Security Checks	medium
88882	AIX 7.1 TL 3 : libxml2 (IV80586)	Nessus	AIX Local Security Checks	medium
88742	F5 Networks BIG-IP : Multiple libXML2 vulnerabilities (K61570943)	Nessus	F5 Networks Local Security Checks	high
88122	openSUSE Security Update : libxml2 (openSUSE-2016-32)	Nessus	SuSE Local Security Checks	high
87865	SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2016:0049-1)	Nessus	SuSE Local Security Checks	high
87862	SUSE SLED11 / SLES11 Security Update : libxml2 (SUSE-SU-2016:0030-1)	Nessus	SuSE Local Security Checks	high
87631	openSUSE Security Update : libxml2 (openSUSE-2015-959)	Nessus	SuSE Local Security Checks	high
87608	Debian DSA-3430-1 : libxml2 - security update	Nessus	Debian Local Security Checks	critical
87581	Scientific Linux Security Update : libxml2 on SL7.x x86_64 (20151207)	Nessus	Scientific Linux Local Security Checks	high
87369	Ubuntu 14.04 LTS : libxml2 vulnerabilities (USN-2834-1)	Nessus	Ubuntu Local Security Checks	critical
87354	Amazon Linux AMI : libxml2 (ALAS-2015-628)	Nessus	Amazon Linux Local Security Checks	high
87235	Scientific Linux Security Update : libxml2 on SL6.x i386/x86_64 (20151207)	Nessus	Scientific Linux Local Security Checks	high
87234	RHEL 7 : libxml2 (RHSA-2015:2550)	Nessus	Red Hat Local Security Checks	critical
87233	RHEL 6 : libxml2 (RHSA-2015:2549)	Nessus	Red Hat Local Security Checks	critical
87231	Oracle Linux 7 : libxml2 (ELSA-2015-2550)	Nessus	Oracle Linux Local Security Checks	critical
87230	Oracle Linux 6 : libxml2 (ELSA-2015-2549)	Nessus	Oracle Linux Local Security Checks	critical
87224	CentOS 7 : libxml2 (CESA-2015:2550)	Nessus	CentOS Local Security Checks	critical
87223	CentOS 6 : libxml2 (CESA-2015:2549)	Nessus	CentOS Local Security Checks	high
87076	Debian DLA-355-1 : libxml2 security update	Nessus	Debian Local Security Checks	medium
87000	FreeBSD : libxml2 -- multiple vulnerabilities (e5423caf-8fb8-11e5-918c-bcaec565249c)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2015-8241

critical

Tenable Plugins

critical

critical

critical

medium

medium

medium

medium

medium

medium

medium

high

high

high

high

high

critical

high

critical

high

high

critical

critical

critical

critical

critical

high

medium

high