Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause a denial-of-service against the application, information leaks, or potentially, the execution of arbitrary code with the privileges of the user running the application.

This update for libxml2 fixes the following security issues :

  - CVE-2017-9050: A heap-based buffer over-read in     xmlDictAddString (bsc#1039069, bsc#1039661)

  - CVE-2017-9049: A heap-based buffer overflow in     xmlDictComputeFastKey (bsc#1039066)

  - CVE-2017-9048: A stack overflow vulnerability in     xmlSnprintfElementContent (bsc#1039063)

  - CVE-2017-9047: A stack overflow vulnerability in     xmlSnprintfElementContent (bsc#1039064)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components :

  - 802.1X
  - apache
  - AppleScript
  - ATS
  - Audio
  - CFString
  - CoreText
  - curl
  - Dictionary Widget
  - file
  - Fonts
  - fsck_msdos
  - HFS
  - Heimdal
  - HelpViewer
  - ImageIO
  - Kernel
  - libarchive
  - Open Scripting Architecture
  - PCRE
  - Postfix
  - Quick Look
  - QuickTime
  - Remote Management
  - Sandbox
  - StreamingZip
  - tcpdump
  - Wi-Fi

The version of Apple iOS running on the mobile device is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208143 security advisory.

ID	名稱	產品	系列	已發布	已更新	嚴重性
102685	Debian DSA-3952-1 : libxml2 - security update	Nessus	Debian Local Security Checks	2017/8/23	2021/1/4	critical
100754	SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:1538-1)	Nessus	SuSE Local Security Checks	2017/6/13	2021/1/6	high
104379	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-001 and 2017-004)	Nessus	MacOS X Local Security Checks	2017/11/3	2024/5/28	critical
700542	Apple iOS < 11.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2019/4/17	2019/4/17	critical

偵測

搜尋 Plugin

critical

high

critical

critical