xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - xmlsec1: xmlsec vulnerable to external entity expansion (CVE-2017-1000061)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - xmlsec1: xmlsec vulnerable to external entity expansion (CVE-2017-1000061)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5674-1 advisory.

    It was discovered that XML Security Library incorrectly handled certain input documents. An attacker could     possibly use this issue to obtain sensitive information or cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Update to 1.2.29 that's required by LibreOffice 6.4.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered xmlsec1's use of libxml2 inadvertently enabled external entity expansion (XXE) along with validation. An attacker could craft an XML file that would cause xmlsec1 to try and read local files or HTTP/FTP URLs, leading to information disclosure or denial of service. (CVE-2017-1000061)

According to the version of the xmlsec1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was discovered xmlsec1's use of libxml2     inadvertently enabled external entity expansion (XXE)     along with validation. An attacker could craft an XML     file that would cause xmlsec1 to try and read local     files or HTTP/FTP URLs, leading to information     disclosure or denial of service. (CVE-2017-1000061)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for xmlsec1 is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to support major XML security standards 'XML Digital Signature' and 'XML Encryption'.

Security Fix(es) :

* It was discovered xmlsec1's use of libxml2 inadvertently enabled external entity expansion (XXE) along with validation. An attacker could craft an XML file that would cause xmlsec1 to try and read local files or HTTP/FTP URLs, leading to information disclosure or denial of service. (CVE-2017-1000061)

Security Fix(es) :

  - It was discovered xmlsec1's use of libxml2 inadvertently     enabled external entity expansion (XXE) along with     validation. An attacker could craft an XML file that     would cause xmlsec1 to try and read local files or     HTTP/FTP URLs, leading to information disclosure or     denial of service. (CVE-2017-1000061)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2492 advisory.

    XML Security Library is a C library based on LibXML2 and OpenSSL. The library was created with a goal to     support major XML security standards XML Digital Signature and XML Encryption.

    Security Fix(es):

    * It was discovered xmlsec1's use of libxml2 inadvertently enabled external entity expansion (XXE) along     with validation. An attacker could craft an XML file that would cause xmlsec1 to try and read local files     or HTTP/FTP URLs, leading to information disclosure or denial of service. (CVE-2017-1000061)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2492 advisory.

    - CVE-2017-1000061
    - CVE-2017-1000061

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
199829	RHEL 6 : xmlsec1 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199824	RHEL 5 : xmlsec1 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196886	RHEL 6 : xmlsec1 (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
196797	RHEL 5 : xmlsec1 (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	critical
166108	Ubuntu 16.04 ESM : XML Security Library vulnerability (USN-5674-1)	Nessus	Ubuntu Local Security Checks	high
133427	Fedora 31 : xmlsec1 (2020-9573355ff4)	Nessus	Fedora Local Security Checks	high
103224	Amazon Linux AMI : xmlsec1 (ALAS-2017-890)	Nessus	Amazon Linux Local Security Checks	high
103032	EulerOS 2.0 SP2 : xmlsec1 (EulerOS-SA-2017-1194)	Nessus	Huawei Local Security Checks	high
103031	EulerOS 2.0 SP1 : xmlsec1 (EulerOS-SA-2017-1193)	Nessus	Huawei Local Security Checks	high
102881	CentOS 7 : xmlsec1 (CESA-2017:2492)	Nessus	CentOS Local Security Checks	high
102677	Scientific Linux Security Update : xmlsec1 on SL7.x x86_64 (20170821)	Nessus	Scientific Linux Local Security Checks	high
102634	RHEL 7 : xmlsec1 (RHSA-2017:2492)	Nessus	Red Hat Local Security Checks	high
102633	Oracle Linux 7 : xmlsec1 (ELSA-2017-2492)	Nessus	Oracle Linux Local Security Checks	high

Detections

Analytics

CVE-2017-1000061

high

Tenable Plugins

high

high

high

high

critical

high

high

high

high

high

high

high

high

high