A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221499.

According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the     function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to     xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It is     recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is     VDB-221499. (CVE-2015-10082)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of libplist installed on the remote host is prior to 1.12-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2067 advisory.

    A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the     function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to     xml external entity reference. The name of the patch is c086cb139af7c82845f6d565e636073ff4b37440. It is     recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is     VDB-221499. (CVE-2015-10082)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0872-1 advisory.

  - A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the     function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to     xml external entity reference. The name of the patch is c086cb139af7c82845f6d565e636073ff4b37440. It is     recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is     VDB-221499. (CVE-2015-10082)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
190303	EulerOS 2.0 SP5 : libplist (EulerOS-SA-2024-1147)	Nessus	Huawei Local Security Checks	critical
176709	Amazon Linux 2 : libplist (ALAS-2023-2067)	Nessus	Amazon Linux Local Security Checks	critical
173285	SUSE SLED12 / SLES12 Security Update : libplist (SUSE-SU-2023:0872-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2015-10082

critical

Tenable Plugins

critical

critical

critical