Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause a denial-of-service against the application, information leaks, or potentially, the execution of arbitrary code with the privileges of the user running the application.

This update for libxml2 fixes the following security issues :

  - CVE-2017-9050: A heap-based buffer over-read in     xmlDictAddString (bsc#1039069, bsc#1039661)

  - CVE-2017-9049: A heap-based buffer overflow in     xmlDictComputeFastKey (bsc#1039066)

  - CVE-2017-9048: A stack overflow vulnerability in     xmlSnprintfElementContent (bsc#1039063)

  - CVE-2017-9047: A stack overflow vulnerability in     xmlSnprintfElementContent (bsc#1039064)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components :

  - 802.1X
  - apache
  - AppleScript
  - ATS
  - Audio
  - CFString
  - CoreText
  - curl
  - Dictionary Widget
  - file
  - Fonts
  - fsck_msdos
  - HFS
  - Heimdal
  - HelpViewer
  - ImageIO
  - Kernel
  - libarchive
  - Open Scripting Architecture
  - PCRE
  - Postfix
  - Quick Look
  - QuickTime
  - Remote Management
  - Sandbox
  - StreamingZip
  - tcpdump
  - Wi-Fi

The version of Apple iOS running on the mobile device is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208143 security advisory.

ID	Name	Product	Family	Published	Updated	Severity
102685	Debian DSA-3952-1 : libxml2 - security update	Nessus	Debian Local Security Checks	8/23/2017	1/4/2021	critical
100754	SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:1538-1)	Nessus	SuSE Local Security Checks	6/13/2017	1/6/2021	high
104379	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-001 and 2017-004)	Nessus	MacOS X Local Security Checks	11/3/2017	5/28/2024	critical
700542	Apple iOS < 11.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	4/17/2019	4/17/2019	critical

Detections

Analytics

Plugins Search

critical

high

critical

critical