PT-2008-1094 · Gentoo Linux · Libxml2

Christian Weiske · Publicado 2008-10-03 · Atualizado 2024-06-15 · CVE-2008-4409

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.7.2-r1

Description The issue affects the libxml2 package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be carried out remotely.

Recommendations For versions prior to 2.7.2-r1, update to version 2.7.2-r1 or later to resolve the issue.

Exploit

Correção

XML Entity Expansion

Enumeração de Fraquezas

CWE-399

CWE-776

Identificadores relacionados

BDU:2015-09349

CVE-2008-4409

OPENSUSE-SU-2024:10192-1

OPENSUSE-SU-2024:10228-1

Produtos afetados

Libxml2

Referências · 55

• 🔥 https://exploit-db.com/exploits/32454 · Exploit
• 🔥 http://bugzilla.gnome.org/show_bug.cgi?id=554660 · Exploit
• http://secunia.com/advisories/32175 · Nota
• https://suse.com/security/cve/CVE-2014-0191 · Nota
• https://suse.com/security/cve/CVE-2016-4483 · Nota
• https://suse.com/security/cve/CVE-2013-1969 · Nota
• https://suse.com/security/cve/CVE-2015-8242 · Nota
• https://suse.com/security/cve/CVE-2016-3627 · Nota
• https://suse.com/security/cve/CVE-2015-1819 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45633 · Nota
• https://suse.com/security/cve/CVE-2016-1839 · Nota
• https://suse.com/security/cve/CVE-2008-4225 · Nota
• http://security.gentoo.org/glsa/glsa-200812-06.xml · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-8035 · Nota
• http://openwall.com/lists/oss-security/2008/10/02/4 · Nota