Libxml2 was updated to fix buffer overread problems which could lead to crashes (out of bounds read). (CVE-2013-2877)

Several vulnerabilities have been discovered in the Chromium web browser.

  - CVE-2013-2853     The HTTPS implementation does not ensure that headers     are terminated by \r\n\r\n (carriage return, newline,     carriage return, newline).

  - CVE-2013-2867     Chrome does not properly prevent pop-under windows.

  - CVE-2013-2868     common/extensions/sync_helper.cc proceeds with sync     operations for NPAPI extensions without checking for a     certain plugin permission setting.

  - CVE-2013-2869     Denial of service (out-of-bounds read) via a crafted     JPEG2000 image.

  - CVE-2013-2870     Use-after-free vulnerability in network sockets.

  - CVE-2013-2871     Use-after-free vulnerability in input handling.

  - CVE-2013-2873     Use-after-free vulnerability in resource loading.

  - CVE-2013-2875     Out-of-bounds read in SVG file handling.

  - CVE-2013-2876     Chromium does not properly enforce restrictions on the     capture of screenshots by extensions, which could lead     to information disclosure from previous page visits.

  - CVE-2013-2877     Out-of-bounds read in XML file handling.

  - CVE-2013-2878     Out-of-bounds read in text handling.

  - CVE-2013-2879     The circumstances in which a renderer process can be     considered a trusted process for sign-in and subsequent     sync operations were not propertly checked.

  - CVE-2013-2880     The Chromium 28 development team found various issues     from internal fuzzing, audits, and other studies.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-350:02 advisory.

    This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML     files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse     time or later once the document has been modified. The output can be a simple SAX stream or and in-memory     DOM like representations. In this case one can use the built-in XPath and XPointer implementation to     select subnodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP     modules and combined to an URI library.
    Security issues fixed with this release:
     CVE-2013-2877      parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows     remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly,     related to the lack of certain checks for the XML_PARSER_EOF state.
     CVE-2014-0191      No information available at the time of writing, please refer to the CVE link below.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0513 advisory.

    The libxml2 library is a development toolbox providing the implementation     of various XML standards.

    It was discovered that libxml2 loaded external parameter entities even when     entity substitution was disabled. A remote attacker able to provide a     specially crafted XML file to an application linked against libxml2 could     use this flaw to conduct XML External Entity (XXE) attacks, possibly     resulting in a denial of service or an information leak on the system.
    (CVE-2014-0191)

    An out-of-bounds read flaw was found in the way libxml2 detected the end of     an XML file. A remote attacker could provide a specially crafted XML file     that, when processed by an application linked against libxml2, could cause     the application to crash. (CVE-2013-2877)

    The CVE-2014-0191 issue was discovered by Daniel P. Berrange of Red Hat.

    All libxml2 users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. The desktop must be     restarted (log out, then log back in) for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was discovered that libxml2 would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly obtain access to arbitrary files or cause resource consumption. This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS, and Ubuntu 12.10.
(CVE-2013-0339)

It was discovered that libxml2 incorrectly handled documents that end abruptly. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. (CVE-2013-2877).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote VMware ESXi host is version 5.1 prior to build 2323236. It is, therefore, affected by the following vulnerabilities in bundled third-party libraries :

  - Multiple vulnerabilities exist in the bundled Python     library. (CVE-2011-3389, CVE-2012-0845, CVE-2012-0876,     CVE-2012-1150, CVE-2013-1752, CVE-2013-4238)

  - Multiple vulnerabilities exist in the bundled GNU C     Library (glibc). (CVE-2013-0242, CVE-2013-1914,     CVE-2013-4332)

  - Multiple vulnerabilities exist in the bundled XML     Parser library (libxml2). (CVE-2013-2877, CVE-2014-0191)

  - Multiple vulnerabilities exist in the bundled cURL     library (libcurl). (CVE-2014-0015, CVE-2014-0138)

The remote VMware ESXi host is affected by multiple vulnerabilities :

  - Multiple denial of service vulnerabilities exist in     Python function _read_status() in library httplib and     in function readline() in libraries smtplib, ftplib,     nntplib, imaplib, and poplib. A remote attacker can     exploit these vulnerabilities to crash the module.
    (CVE-2013-1752)

  - A out-of-bounds read error exists in file parser.c in     library libxml2 due to a failure to properly check the     XML_PARSER_EOF state. An unauthenticated, remote     attacker can exploit this, via a crafted document that     abruptly ends, to cause a denial of service.
    (CVE-2013-2877)

  - A spoofing vulnerability exists in the Python SSL module     in the ssl.match_hostname() function due to improper     handling of the NULL character ('\0') in a domain name     in the Subject Alternative Name field of an X.509     certificate. A man-in-the-middle attacker can exploit     this, via a crafted certificate issued by a legitimate     certification authority, to spoof arbitrary SSL servers.
    (CVE-2013-4238)

  - cURL and libcurl are affected by a flaw related to the     re-use of NTLM connections whenever more than one     authentication method is enabled. An unauthenticated,     remote attacker can exploit this, via a crafted request,     to connect and impersonate other users. (CVE-2014-0015)

  - The default configuration in cURL and libcurl reuses the     SCP, SFTP, POP3, POP3S, IMAP, IMAPS, SMTP, SMTPS, LDAP,     and LDAPS connections. An unauthenticated, remote     attacker can exploit this, via a crafted request, to     connect and impersonate other users. (CVE-2014-0138)

  - A flaw exists in the xmlParserHandlePEReference()     function in file parser.c in libxml2 due to loading     external entities regardless of entity substitution or     validation being enabled. An unauthenticated, remote     attacker can exploit this, via a crafted XML document,     to exhaust resources, resulting in a denial of service.
    (CVE-2014-0191)

The version of Google Chrome installed on the remote host is a version prior to 28.0.1500.71 and is, therefore, affected by multiple vulnerabilities :

  - A vulnerability exists that exposes HTTP in SSL to a     man-in-the-middle attack. (CVE-2013-2853)

  - Block pop-unders in various scenarios. (CVE-2013-2867)

  - An error exists related to an incorrect sync of the     NPAPI extension component. (CVE-2013-2868)

  - An unspecified flaw exists due to a lack of entropy in     renderers. (CVE-2013-2872)

  - Use-after-free errors exist related to network sockets,     input handling, and resource loading. (CVE-2013-2870,     CVE-2013-2871, CVE-2013-2873)

  - A screen data leak error exists related to GL textures.
    (CVE-2013-2874)

  - An extension permission error exists related to     interstitials.  (CVE-2013-2876)

  - Multiple out-of-bounds errors exist related to JPEG2000,     SVG, text handling and XML parsing.  (CVE-2013-2869,     CVE-2013-2875, CVE-2013-2877, CVE-2013-2878)

  - An unspecified error exists when setting up sign-in and     sync. (CVE-2013-2879)

  - The vendor reports various, unspecified errors exist.
    (CVE-2013-2880)

ID	名稱	產品	系列	已發布	已更新	嚴重性
75092	openSUSE Security Update : libxml2 (openSUSE-SU-2013:1221-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
68970	Debian DSA-2724-1 : chromium-browser - several vulnerabilities	Nessus	Debian Local Security Checks	2013/7/19	2021/1/11	high
289428	MiracleLinux 4 : libxml2-2.7.6-14.1.0.2.AXS4 (AXSA:2014-350:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
74102	RHEL 6 : libxml2 (RHSA-2014:0513)	Nessus	Red Hat Local Security Checks	2014/5/20	2024/11/4	critical
68903	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : libxml2 vulnerabilities (USN-1904-1)	Nessus	Ubuntu Local Security Checks	2013/7/16	2019/9/19	medium
79862	ESXi 5.1 < Build 2323236 Third-Party Libraries Multiple Vulnerabilities (remote check) (BEAST)	Nessus	Misc.	2014/12/12	2022/12/5	medium
87681	VMware ESXi Multiple Vulnerabilities (VMSA-2014-0012)	Nessus	Misc.	2015/12/30	2021/1/6	medium
67232	Google Chrome < 28.0.1500.71 Multiple Vulnerabilities	Nessus	Windows	2013/7/10	2026/5/19	high

偵測

搜尋 Plugin

medium

high

critical

critical

medium

medium

medium

high