リモートの Redhat Enterprise Linux 6/7 ホストにインストールされているパッケージは、RHSA-2020: 2644アドバイザリに記載されている脆弱性の影響を受けます。

  - expat: 入力に多数のコロンがあると、パーサーが大量のリソースを消費し、DoSにつながります（CVE-2018-20843）

  - httpd: mod_http2: 文字列比較でのメモリ解放後読み取り（CVE-2019-0196）

  - httpd: mod_http2: 最新版へのアップグレードでクラッシュする可能性（CVE-2019-0197）

  - expat: 細工されたXML入力を介したヒープベースのバッファオーバーリード（CVE-2019-15903）

  - libxml2: parser.cのxmlParseBalancedChunkMemoryRecoverにおけるメモリリーク（CVE-2019-19956）

  - libxml2: xmlschemas.cのxmlSchemaPreRunにおけるメモリリーク（CVE-2019-20388）

  - nghttp2: SETTINGSフレームが大きすぎると、DoSにつながる可能性があります（CVE-2020-11080）

  - httpd: 初期化されていない値のmod_proxy_ftp使用（CVE-2020-1934）

  - libxml2: 一部のファイル終端の状況におけるxmlStringLenDecodeEntitiesの無限ループ（CVE-2020-7595）

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

According to the version of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - xmlStringLenDecodeEntities in parser.c in libxml2     2.9.10 has an infinite loop in a certain end-of-file     situation.(CVE-2020-7595)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several security vulnerabilities were corrected in libxml2, the GNOME XML library.

CVE-2017-8872

Global buffer-overflow in the htmlParseTryOrFinish function.

CVE-2017-18258

The xz_head function in libxml2 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.

CVE-2018-14404

A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case.
Applications processing untrusted XSL format inputs may be vulnerable to a denial of service attack.

CVE-2018-14567

If the option --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file.

CVE-2019-19956

The xmlParseBalancedChunkMemoryRecover function has a memory leak related to newDoc->oldNs.

CVE-2019-20388

A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service.

CVE-2020-7595

Infinite loop in xmlStringLenDecodeEntities can cause a denial of service.

CVE-2020-24977

Out-of-bounds read restricted to xmllint --htmlout.

For Debian 9 stretch, these problems have been fixed in version 2.9.4+dfsg1-2.2+deb9u3.

We recommend that you upgrade your libxml2 packages.

For the detailed security status of libxml2 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libxml2

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202010-04 (libxml2: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libxml2. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4274-1 advisory.

    It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this     issue to cause a denial of service. (CVE-2019-19956, CVE-2020-7595)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - This library allows to manipulate XML files. It     includes support to read, modify and write XML and HTML     files. There is DTDs support this includes parsing and     validation even with complex DtDs, either at parse time     or later once the document has been modified. The     output can be a simple SAX stream or and in-memory DOM     like representations. In this case one can use the     built-in XPath and XPointer implementation to select     sub nodes or ranges. A flexible Input/Output mechanism     is available, with existing HTTP and FTP modules and     combined to an URI library.Security     Fix(es):xmlSchemaPreRun in xmlschemas.c in libxml2     2.9.10 allows an xmlSchemaValidateStream memory     leak.(CVE-2019-20388)xmlStringLenDecodeEntities in     parser.c in libxml2 2.9.10 has an infinite loop in a     certain end-of-file     situation.(CVE-2020-7595)xmlParseBalancedChunkMemoryRec     over in parser.c in libxml2 before 2.9.10 has a memory     leak related to newDoc->oldNs.(CVE-2019-19956)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - libxml2: memory leak in     xmlParseBalancedChunkMemoryRecover in parser.c     (CVE-2019-19956)

  - libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c     (CVE-2019-20388)

  - libxml2: infinite loop in xmlStringLenDecodeEntities in     some end-of-file situations (CVE-2020-7595)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4479 advisory.

    - Fix CVE-2019-19956 (#1793001)
    - Fix CVE-2020-7595 (#1799786)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libxml2 packages installed that are affected by multiple vulnerabilities:

  - xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to     newDoc->oldNs. (CVE-2019-19956)

  - xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
    (CVE-2019-20388)

  - xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file     situation. (CVE-2020-7595)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4479 advisory.

  - xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to     newDoc->oldNs. (CVE-2019-19956)

  - xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
    (CVE-2019-20388)

  - xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file     situation. (CVE-2020-7595)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 5.19.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.1 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
137705	RHEL 6/7：Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3（RHSA-2020: 2644)	Nessus	Red Hat Local Security Checks	2020/6/22	2024/11/7	medium
141733	EulerOS Virtualization 3.0.2.2 : libxml2 (EulerOS-SA-2020-2228)	Nessus	Huawei Local Security Checks	2020/10/21	2022/5/11	high
140469	Debian DLA-2369-1 : libxml2 security update	Nessus	Debian Local Security Checks	2020/9/10	2024/2/21	critical
141669	GLSA-202010-04 : libxml2: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2020/10/21	2024/2/14	high
133646	Ubuntu 16.04 LTS / 18.04 LTS : libxml2 vulnerabilities (USN-4274-1)	Nessus	Ubuntu Local Security Checks	2020/2/12	2024/8/27	high
135537	EulerOS 2.0 SP3 : libxml2 (EulerOS-SA-2020-1408)	Nessus	Huawei Local Security Checks	2020/4/15	2024/3/18	high
141661	Scientific Linux Security Update : libxml2 on SL7.x x86_64 (20201001)	Nessus	Scientific Linux Local Security Checks	2020/10/21	2024/2/14	high
142751	Oracle Linux 8 : libxml2 (ELSA-2020-4479)	Nessus	Oracle Linux Local Security Checks	2020/11/12	2024/11/1	high
154604	NewStart CGSL CORE 5.05 / MAIN 5.05 : libxml2 Multiple Vulnerabilities (NS-SA-2021-0148)	Nessus	NewStart CGSL Local Security Checks	2021/10/28	2021/10/28	high
157657	AlmaLinux 8 : libxml2 (ALSA-2020:4479)	Nessus	Alma Linux Local Security Checks	2022/2/9	2022/2/14	high
164584	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)	Nessus	Misc.	2022/9/1	2025/7/22	critical

偵測

搜尋 Plugin

medium

high

critical

high

high

high

high

high

high

high

critical