It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

This update for libxml2 fixes the following issues :

  - Fix NULL dereference in xpointer.c when in recovery mode     [bsc#1014873]

  - CVE-2016-9597: An XML document with many opening tags     could have caused a overflow of the stack not detected     by the recursion limits, allowing for DoS (bsc#1017497)

  - CVE-2014-0191: External parameter entity loaded when     entity substitution is disabled could cause a DoS.
    (bsc#876652)

  - CVE-2016-9318: XML External Entity (XXE) could be abused     via crafted document. (bsc#1010675)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libxml2 fixes the following issues :

  - CVE-2016-4658: use-after-free error could lead to crash     [bsc#1005544]

  - Fix NULL dereference in xpointer.c when in recovery mode     [bsc#1014873]

  - CVE-2016-9597: An XML document with many opening tags     could have caused a overflow of the stack not detected     by the recursion limits, allowing for DoS (bsc#1017497).

For CVE-2016-9318 we decided not to ship a fix since it can break existing setups. Please take appropriate actions if you parse untrusted XML files and use the new -noxxe flag if possible (bnc#1010675, bnc#1013930).

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for libxml2 fixes the following issues :

  - CVE-2016-4658: use-after-free error could lead to crash     [bsc#1005544]

  - Fix NULL dereference in xpointer.c when in recovery mode     [bsc#1014873]

  - CVE-2016-9597: An XML document with many opening tags     could have caused a overflow of the stack not detected     by the recursion limits, allowing for DoS (bsc#1017497).
    For CVE-2016-9318 we decided not to ship a fix since it     can break existing setups. Please take appropriate     actions if you parse untrusted XML files and use the new
    -noxxe flag if possible (bnc#1010675, bnc#1013930).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	Local	critical
100352	SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:1366-1)	Nessus	SuSE Local Security Checks	Local	medium
97116	openSUSE Security Update : libxml2 (openSUSE-2017-244)	Nessus	SuSE Local Security Checks	Local	critical
97015	SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:0380-1)	Nessus	SuSE Local Security Checks	Local	critical

Detections

Analytics

CVE-2016-9597

high

Tenable Plugins

critical

medium

critical

critical