CVE-2011-2834

MEDIUM

Description

Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

References

http://code.google.com/p/chromium/issues/detail?id=93472

http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html

http://osvdb.org/75560

http://rhn.redhat.com/errata/RHSA-2013-0217.html

http://support.apple.com/kb/HT5281

http://support.apple.com/kb/HT5503

http://www.debian.org/security/2012/dsa-2394

http://www.mandriva.com/security/advisories?name=MDVSA-2011:145

http://www.redhat.com/support/errata/RHSA-2011-1749.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/69885

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14410

Details

Source: MITRE

Published: 2011-09-19

Updated: 2020-05-08

Type: CWE-415

Risk Information

CVSS v2.0

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM

Vulnerable Software

Tenable Plugins

View all (42 total)

ID	Name	Product	Family	Severity
89109	VMware ESX Service Console Multiple Vulnerabilities (VMSA-2012-0008) (remote check)	Nessus	Misc.	critical
89037	VMware ESX / ESXi libxml2 Multiple Vulnerabilities (VMSA-2012-0012) (remote check)	Nessus	Misc.	high
80688	Oracle Solaris Third-Party Patch Update : libxml2 (cve_2011_0216_denial_of)	Nessus	Solaris Local Security Checks	high
79283	RHEL 5 : rhev-hypervisor5 (RHSA-2012:0168)	Nessus	Red Hat Local Security Checks	high
75936	openSUSE Security Update : libxml2 (openSUSE-SU-2012:0073-1)	Nessus	SuSE Local Security Checks	high
75635	openSUSE Security Update : libxml2 (openSUSE-SU-2012:0073-1)	Nessus	SuSE Local Security Checks	high
70884	ESXi 5.0 < Build 764879 Multiple Vulnerabilities (remote check)	Nessus	Misc.	high
68721	Oracle Linux 6 : mingw32-libxml2 (ELSA-2013-0217)	Nessus	Oracle Linux Local Security Checks	critical
68429	Oracle Linux 5 : libxml2 (ELSA-2012-0017)	Nessus	Oracle Linux Local Security Checks	high
68428	Oracle Linux 4 : libxml2 (ELSA-2012-0016)	Nessus	Oracle Linux Local Security Checks	high
64425	Scientific Linux Security Update : mingw32-libxml2 on SL6.x (x86_64) (20130131)	Nessus	Scientific Linux Local Security Checks	critical
64391	RHEL 6 : mingw32-libxml2 (RHSA-2013:0217)	Nessus	Red Hat Local Security Checks	critical
64384	CentOS 6 : mingw32-libxml2 (CESA-2013:0217)	Nessus	CentOS Local Security Checks	critical
62357	Apple TV < 5.1 Multiple Vulnerabilities	Nessus	Gain a shell remotely	high
62324	Fedora 16 : libxml2-2.7.8-8.fc16 (2012-13824)	Nessus	Fedora Local Security Checks	high
62323	Fedora 17 : libxml2-2.7.8-9.fc17 (2012-13820)	Nessus	Fedora Local Security Checks	high
62242	Apple iOS < 6.0 Multiple Vulnerabilities	Nessus	Mobile Devices	critical
6589	Apple iOS < 6.0 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	high
61217	Scientific Linux Security Update : libxml2 on SL5.x i386/x86_64 (20120111)	Nessus	Scientific Linux Local Security Checks	high
61216	Scientific Linux Security Update : libxml2 on SL4.x i386/x86_64 (20120111)	Nessus	Scientific Linux Local Security Checks	high
61192	Scientific Linux Security Update : libxml2 on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	critical
59966	VMSA-2012-0012 : VMware ESXi update to third-party library	Nessus	VMware ESX Local Security Checks	critical
59851	HP System Management Homepage < 7.1.1 Multiple Vulnerabilities	Nessus	Web Servers	critical
6482	Mac OS X 10.7 < 10.7.4 Multiple Vulnerabilities	Nessus Network Monitor	Generic	critical
59067	Mac OS X Multiple Vulnerabilities (Security Update 2012-002) (BEAST)	Nessus	MacOS X Local Security Checks	critical
59066	Mac OS X 10.7.x < 10.7.4 Multiple Vulnerabilities (BEAST)	Nessus	MacOS X Local Security Checks	critical
58903	VMSA-2012-0008 : VMware ESX updates to ESX Service Console	Nessus	VMware ESX Local Security Checks	critical
57702	Debian DSA-2394-1 : libxml2 - several vulnerabilities	Nessus	Debian Local Security Checks	high
57615	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libxml2 vulnerabilities (USN-1334-1)	Nessus	Ubuntu Local Security Checks	high
57531	SuSE 11.1 Security Update : libxml2 (SAT Patch Number 5489)	Nessus	SuSE Local Security Checks	high
57492	RHEL 5 : libxml2 (RHSA-2012:0017)	Nessus	Red Hat Local Security Checks	high
57491	RHEL 4 : libxml2 (RHSA-2012:0016)	Nessus	Red Hat Local Security Checks	high
57487	CentOS 5 : libxml2 (CESA-2012:0017)	Nessus	CentOS Local Security Checks	high
57486	CentOS 4 : libxml2 (CESA-2012:0016)	Nessus	CentOS Local Security Checks	high
57022	RHEL 6 : libxml2 (RHSA-2011:1749)	Nessus	Red Hat Local Security Checks	critical
56686	GLSA-201111-01 : Chromium, V8: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
56660	GLSA-201110-26 : libxml2: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
56429	Mandriva Linux Security Advisory : libxml2 (MDVSA-2011:145)	Nessus	Mandriva Local Security Checks	high
800955	Google Chrome < 14.0.835.163 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
6024	Google Chrome < 14.0.835.163 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
56230	Google Chrome < 14.0.835.163 Multiple Vulnerabilities	Nessus	Windows	high
51069	FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	critical