Scientific Linux Security Update : libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64

Critical Nessus Plugin ID 60473


The remote Scientific Linux host is missing one or more security updates.


A heap-based buffer overflow flaw was found in the way libxml2 handled long XML entity names. If an application linked against libxml2 processed untrusted malformed XML content, it could cause the application to crash or, possibly, execute arbitrary code.


Update the affected libxml2, libxml2-devel and / or libxml2-python packages.

See Also

Plugin Details

Severity: Critical

ID: 60473

File Name: sl_20080911_libxml2_on_SL3_x.nasl

Version: $Revision: 1.1 $

Type: local

Agent: unix

Published: 2012/08/01

Modified: 2012/08/01

Dependencies: 12634

Risk Information

Risk Factor: Critical


Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2008/09/11

Reference Information

CVE: CVE-2008-3529

CWE: 119