Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

An update of the libxml2 package has been released.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libxml2-2.9.13-5.el9 build changelog.

  - Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement()     function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via     supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy     SAX1 interface with custom callbacks; there is a crash even without crafted input. (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7544 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0413 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303)

    * libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304)

    * libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)

    * libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469)

    * libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:0119 advisory.

  - Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement()     function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via     supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy     SAX1 interface with custom callbacks; there is a crash even without crafted input. (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-0119 advisory.

    - Fix CVE-2023-39615 (RHEL-5179)
    - Fix CVE-2023-28484 (#2186692)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0119 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:0119 advisory.

  - Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement()     function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via     supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy     SAX1 interface with custom callbacks; there is a crash even without crafted input. (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:7747 advisory.

  - Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement()     function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via     supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy     SAX1 interface with custom callbacks; there is a crash even without crafted input. (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7747 advisory.

    [2.9.13-5]
    - Fix CVE-2023-39615 (RHEL-5180)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7747 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libxml2 installed on the remote host is prior to 2.9.1-6.6.43. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1841 advisory.

  - ** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the     xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial     of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does     not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
    (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3698-1 advisory.

  - ** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the     xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial     of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does     not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
    (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3699-1 advisory.

  - ** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the     xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial     of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does     not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
    (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-343 advisory.

  - ** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the     xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial     of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does     not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
    (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2249 advisory.

  - ** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the     xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial     of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does     not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
    (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3666-1 advisory.

  - ** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the     xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial     of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does     not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
    (CVE-2023-39615)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3665-1 advisory.

  - Possible cross-site scripting vulnerability in libxml after commit 960f0e2. (CVE-2016-3709)

  - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference     and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c. (CVE-2023-28484)

  - An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML     document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic     and memory errors, such as a double free. This behavior occurs because there is an attempt to use the     first byte of an empty string, and any value is possible (not solely the '\0' value). (CVE-2023-29469)

  - ** DISPUTED ** Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the     xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial     of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does     not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
    (CVE-2023-39615)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
204450	Photon OS 4.0: Libxml2 PHSA-2023-4.0-0469	Nessus	PhotonOS Local Security Checks	medium
204213	Photon OS 5.0: Libxml2 PHSA-2023-5.0-0092	Nessus	PhotonOS Local Security Checks	medium
195373	RHEL 7 : libxml2 (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
195344	RHEL 6 : libxml2 (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
193932	CentOS 9 : libxml2-2.9.13-5.el9	Nessus	CentOS Local Security Checks	medium
189637	RHEL 8 : libxml2 (RHSA-2023:7544)	Nessus	Red Hat Local Security Checks	medium
189557	RHEL 8 : libxml2 (RHSA-2024:0413)	Nessus	Red Hat Local Security Checks	high
188010	AlmaLinux 8 : libxml2 (ALSA-2024:0119)	Nessus	Alma Linux Local Security Checks	medium
187907	Oracle Linux 8 : libxml2 (ELSA-2024-0119)	Nessus	Oracle Linux Local Security Checks	medium
187894	RHEL 8 : libxml2 (RHSA-2024:0119)	Nessus	Red Hat Local Security Checks	medium
187873	CentOS 8 : libxml2 (CESA-2024:0119)	Nessus	CentOS Local Security Checks	medium
186918	AlmaLinux 9 : libxml2 (ALSA-2023:7747)	Nessus	Alma Linux Local Security Checks	medium
186840	Oracle Linux 9 : libxml2 (ELSA-2023-7747)	Nessus	Oracle Linux Local Security Checks	medium
186801	RHEL 9 : libxml2 (RHSA-2023:7747)	Nessus	Red Hat Local Security Checks	medium
182713	Amazon Linux AMI : libxml2 (ALAS-2023-1841)	Nessus	Amazon Linux Local Security Checks	medium
181744	SUSE SLES15 / openSUSE 15 Security Update : libxml2 (SUSE-SU-2023:3698-1)	Nessus	SuSE Local Security Checks	medium
181740	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libxml2 (SUSE-SU-2023:3699-1)	Nessus	SuSE Local Security Checks	medium
181722	Amazon Linux 2023 : libxml2, libxml2-devel, libxml2-static (ALAS2023-2023-343)	Nessus	Amazon Linux Local Security Checks	medium
181717	Amazon Linux 2 : libxml2 (ALAS-2023-2249)	Nessus	Amazon Linux Local Security Checks	medium
181589	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libxml2 (SUSE-SU-2023:3666-1)	Nessus	SuSE Local Security Checks	medium
181575	SUSE SLES12 Security Update : libxml2 (SUSE-SU-2023:3665-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2023-39615

medium

Tenable Plugins

medium

medium

critical

critical

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium