EulerOS 2.0 SP3 : libxml2 (EulerOS-SA-2018-1186)

Medium Nessus Plugin ID 110850

Synopsis

The remote EulerOS host is missing a security update.

Description

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

- A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android.
Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.(CVE-2017-0663)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected libxml2 package.

See Also

http://www.nessus.org/u?27aa28c3

Plugin Details

Severity: Medium

ID: 110850

File Name: EulerOS_SA-2018-1186.nasl

Version: 1.2

Type: local

Published: 2018/07/03

Modified: 2018/08/10

Dependencies: 12634

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSSv3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:huawei:euleros:libxml2, p-cpe:/a:huawei:euleros:libxml2-devel, p-cpe:/a:huawei:euleros:libxml2-python, cpe:/o:huawei:euleros:2.0

Required KB Items: Host/local_checks_enabled, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp

Excluded KB Items: Host/EulerOS/uvp_version

Patch Publication Date: 2018/06/17

Reference Information

CVE: CVE-2017-0663