CVE-2011-2834medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
References
http://code.google.com/p/chromium/issues/detail?id=93472
http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
http://rhn.redhat.com/errata/RHSA-2013-0217.html
http://support.apple.com/kb/HT5281
http://support.apple.com/kb/HT5503
http://www.debian.org/security/2012/dsa-2394
http://www.mandriva.com/security/advisories?name=MDVSA-2011:145
http://www.redhat.com/support/errata/RHSA-2011-1749.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/69885
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14410
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
Configuration 3
OR
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
Configuration 4
OR
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 89109 | VMware ESX Service Console Multiple Vulnerabilities (VMSA-2012-0008) (remote check) | Nessus | Misc. | critical |
| 89037 | VMware ESX / ESXi libxml2 Multiple Vulnerabilities (VMSA-2012-0012) (remote check) | Nessus | Misc. | high |
| 80688 | Oracle Solaris Third-Party Patch Update : libxml2 (cve_2011_0216_denial_of) | Nessus | Solaris Local Security Checks | high |
| 79283 | RHEL 5 : rhev-hypervisor5 (RHSA-2012:0168) | Nessus | Red Hat Local Security Checks | high |
| 75936 | openSUSE Security Update : libxml2 (openSUSE-SU-2012:0073-1) | Nessus | SuSE Local Security Checks | high |
| 75635 | openSUSE Security Update : libxml2 (openSUSE-SU-2012:0073-1) | Nessus | SuSE Local Security Checks | high |
| 70884 | ESXi 5.0 < Build 764879 Multiple Vulnerabilities (remote check) | Nessus | Misc. | high |
| 68721 | Oracle Linux 6 : mingw32-libxml2 (ELSA-2013-0217) | Nessus | Oracle Linux Local Security Checks | high |
| 68429 | Oracle Linux 5 : libxml2 (ELSA-2012-0017) | Nessus | Oracle Linux Local Security Checks | high |
| 68428 | Oracle Linux 4 : libxml2 (ELSA-2012-0016) | Nessus | Oracle Linux Local Security Checks | high |
| 64425 | Scientific Linux Security Update : mingw32-libxml2 on SL6.x (x86_64) (20130131) | Nessus | Scientific Linux Local Security Checks | high |
| 64391 | RHEL 6 : mingw32-libxml2 (RHSA-2013:0217) | Nessus | Red Hat Local Security Checks | high |
| 64384 | CentOS 6 : mingw32-libxml2 (CESA-2013:0217) | Nessus | CentOS Local Security Checks | high |
| 62357 | Apple TV < 5.1 Multiple Vulnerabilities | Nessus | Gain a shell remotely | high |
| 62324 | Fedora 16 : libxml2-2.7.8-8.fc16 (2012-13824) | Nessus | Fedora Local Security Checks | high |
| 62323 | Fedora 17 : libxml2-2.7.8-9.fc17 (2012-13820) | Nessus | Fedora Local Security Checks | high |
| 6589 | Apple iOS < 6.0 Multiple Vulnerabilities | Nessus Network Monitor | Mobile Devices | high |
| 62242 | Apple iOS < 6.0 Multiple Vulnerabilities | Nessus | Mobile Devices | critical |
| 61217 | Scientific Linux Security Update : libxml2 on SL5.x i386/x86_64 (20120111) | Nessus | Scientific Linux Local Security Checks | high |
| 61216 | Scientific Linux Security Update : libxml2 on SL4.x i386/x86_64 (20120111) | Nessus | Scientific Linux Local Security Checks | high |
| 61192 | Scientific Linux Security Update : libxml2 on SL6.x i386/x86_64 | Nessus | Scientific Linux Local Security Checks | critical |
| 59966 | VMSA-2012-0012 : VMware ESXi update to third-party library | Nessus | VMware ESX Local Security Checks | high |
| 59851 | HP System Management Homepage < 7.1.1 Multiple Vulnerabilities | Nessus | Web Servers | critical |
| 6482 | Mac OS X 10.7 < 10.7.4 Multiple Vulnerabilities | Nessus Network Monitor | Generic | critical |
| 59067 | Mac OS X Multiple Vulnerabilities (Security Update 2012-002) (BEAST) | Nessus | MacOS X Local Security Checks | critical |
| 59066 | Mac OS X 10.7.x < 10.7.4 Multiple Vulnerabilities (BEAST) | Nessus | MacOS X Local Security Checks | critical |
| 58903 | VMSA-2012-0008 : VMware ESX updates to ESX Service Console | Nessus | VMware ESX Local Security Checks | high |
| 57702 | Debian DSA-2394-1 : libxml2 - several vulnerabilities | Nessus | Debian Local Security Checks | high |
| 57615 | Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libxml2 vulnerabilities (USN-1334-1) | Nessus | Ubuntu Local Security Checks | high |
| 57531 | SuSE 11.1 Security Update : libxml2 (SAT Patch Number 5489) | Nessus | SuSE Local Security Checks | high |
| 57492 | RHEL 5 : libxml2 (RHSA-2012:0017) | Nessus | Red Hat Local Security Checks | high |
| 57491 | RHEL 4 : libxml2 (RHSA-2012:0016) | Nessus | Red Hat Local Security Checks | high |
| 57487 | CentOS 5 : libxml2 (CESA-2012:0017) | Nessus | CentOS Local Security Checks | high |
| 57486 | CentOS 4 : libxml2 (CESA-2012:0016) | Nessus | CentOS Local Security Checks | high |
| 57022 | RHEL 6 : libxml2 (RHSA-2011:1749) | Nessus | Red Hat Local Security Checks | critical |
| 56686 | GLSA-201111-01 : Chromium, V8: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 56660 | GLSA-201110-26 : libxml2: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | high |
| 56429 | Mandriva Linux Security Advisory : libxml2 (MDVSA-2011:145) | Nessus | Mandriva Local Security Checks | high |
| 800955 | Google Chrome < 14.0.835.163 Multiple Vulnerabilities | Log Correlation Engine | Web Clients | high |
| 6024 | Google Chrome < 14.0.835.163 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | high |
| 56230 | Google Chrome < 14.0.835.163 Multiple Vulnerabilities | Nessus | Windows | high |
| 51069 | FreeBSD : chromium -- multiple vulnerabilities (6887828f-0229-11e0-b84d-00262d5ed8ee) | Nessus | FreeBSD Local Security Checks | critical |