The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2549 advisory.

    The libxml2 library is a development toolbox providing the implementation     of various XML standards.

    Several denial of service flaws were found in libxml2, a library providing     support for reading, modifying, and writing XML and HTML files. A remote     attacker could provide a specially crafted XML or HTML file that, when     processed by an application using libxml2, would cause that application to     use an excessive amount of CPU, leak potentially sensitive information, or     in certain cases crash the application. (CVE-2015-5312, CVE-2015-7497,     CVE-2015-7498, CVE-2015-7499, CVE-2015-7500 CVE-2015-7941, CVE-2015-7942,     CVE-2015-8241, CVE-2015-8242, CVE-2015-8317, BZ#1213957, BZ#1281955)

    Red Hat would like to thank the GNOME project for reporting CVE-2015-7497,     CVE-2015-7498, CVE-2015-7499, CVE-2015-7500, CVE-2015-8241, CVE-2015-8242,     and CVE-2015-8317. Upstream acknowledges Kostya Serebryany of Google as the     original reporter of CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, and     CVE-2015-7500; Hugh Davenport as the original reporter of CVE-2015-8241 and     CVE-2015-8242; and Hanno Boeck as the original reporter of CVE-2015-8317.

    All libxml2 users are advised to upgrade to these updated packages, which     contain a backported patch to correct these issues. The desktop must be     restarted (log out, then log back in) for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : libxml2 (RHSA-2015:2549)

critical Nessus Plugin ID 87233

Version 2.16