Kurt Seifried reports :

So here are the CVE's for the two big ones, libxml2 and expat. Both are affected by the expansion of internal entities (which can be used to consume resources) and external entities (which can cause a denial of service against other services, be used to port scan, etc.).

A billion laughs attack is a type of denial-of-service attack which is aimed at parsers of XML documents.

New expat packages are available for Slackware 14.0, 14.1, 14.2, and
-current to fix a security issue.

The version of IBM Netezza Analytics installed on the remote Linux host is 1.2.1 - 3.2.1. It is, therefore, affected by multiple vulnerabilities in the Open Source James Clark Expat component.

The remote host is running a version of macOS / Mac OS X that is prior to Catalina Security Update 2021-005. It is, therefore, affected by multiple vulnerabilities, including the following:

  - Arbitrary code execution when processing a maliciously crafted image. (CVE-2021-30835, CVE-2021-30847)

  - An integer overflow issue due to insufficient input validation, which can lead to arbitrary code     execution by an unauthenticated attacker when processing a maliciously crafted PDF. (CVE-2021-30860)

  - Arbitrary code execution when processing a maliciously crafted dfont file. (CVE-2021-30841,     CVE-2021-30842, CVE-2021-30843)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses     the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service     (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML     document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already     provides the ability to disable external entity expansion, the responsibility for resolving this issue     lies with application developers; according to this argument, this entry should be REJECTed, and each     affected application would need its own CVE. (CVE-2013-0340)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - A use after free issue was addressed with improved memory management. Exploitation of this vulnerability may lead to     arbitrary code execution. (CVE-2021-30858)

  - An integer overflow was addressed with improved input validation. Exploitation of this vulnerability may lead to     arbitrary code execution. (CVE-2021-30860)

  - Insufficient checks when processing maliciously crafted dfont files may lead to arbitrary code     execution. (CVE-2021-30841, CVE-2021-30842, CVE-2021-30843)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 14.8. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A use after free issue due to incorrect memory management, which can lead to arbitrary code     execution when processing maliciously crafted web content. (CVE-2021-30858)

  - An integer overflow issue due to insufficient input validation, which can lead to arbitrary code     execution when processing a maliciously crafted PDF. (CVE-2021-30860)

  - Arbitrary code execution when processing a maliciously crafted dfont file. (CVE-2021-30841,     CVE-2021-30842, CVE-2021-30843)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201701-21 (Expat: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Expat. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing a user to process a specially crafted XML       file, could execute arbitrary code with the privileges of the process or       cause a Denial of Service condition.  This attack could also be used       against automated systems that arbitrarily process XML files.
  Workaround :

    There is no known workaround at this time.

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses     the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service     (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML     document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already     provides the ability to disable external entity expansion, the responsibility for resolving this issue     lies with application developers; according to this argument, this entry should be REJECTed, and each     affected application would need its own CVE. (CVE-2013-0340)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Apple iOS running on the mobile device is prior to 15. It is, therefore, affected by multiple vulnerabilities, as follows:

  - A buffer overflow when processing a maliciously crafted image may lead to arbitrary code execution.     (CVE-2021-30847)  

  - A memory corruption issue may allow an attacker to execute arbitrary code on the system via maliciously     crafted web content. (CVE-2021-30851)   
  - A race condition on the Kernel may allow a malicious application execute arbitrary code with kernel     privileges. (CVE-2021-30857)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
149883	FreeBSD : texproc/expat2 -- billion laugh attack (5fa90ee6-bc9e-11eb-a287-e0d55e2a8bf9)	Nessus	FreeBSD Local Security Checks	5/25/2021	12/29/2023	critical
149858	Slackware 14.0 / 14.1 / 14.2 / current : expat (SSA:2021-143-01)	Nessus	Slackware Local Security Checks	5/24/2021	12/29/2023	critical
106714	IBM Netezza Analytics Open Source James Clark Expat Multiple Vulnerabilities (swg22012645)	Nessus	General	2/9/2018	11/8/2019	medium
153432	macOS 10.15.x < Catalina Security Update 2021-005 Catalina (HT212805)	Nessus	MacOS X Local Security Checks	9/16/2021	4/25/2023	high
155509	EulerOS Virtualization 2.9.1 : expat (EulerOS-SA-2021-2756)	Nessus	Huawei Local Security Checks	11/17/2021	11/23/2023	critical
153429	macOS 11.x < 11.6 (HT212804)	Nessus	MacOS X Local Security Checks	9/16/2021	4/25/2023	high
153434	Apple iOS < 14.8 Multiple Vulnerabilities (HT212807)	Nessus	Mobile Devices	9/16/2021	4/8/2024	critical
96415	GLSA-201701-21 : Expat: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/12/2017	1/11/2021	critical
153698	EulerOS 2.0 SP9 : expat (EulerOS-SA-2021-2524)	Nessus	Huawei Local Security Checks	9/27/2021	11/29/2023	critical
153711	EulerOS 2.0 SP9 : expat (EulerOS-SA-2021-2548)	Nessus	Huawei Local Security Checks	9/27/2021	11/29/2023	critical
155536	EulerOS Virtualization 2.9.0 : expat (EulerOS-SA-2021-2784)	Nessus	Huawei Local Security Checks	11/17/2021	11/23/2023	critical
153507	Apple iOS < 15 Multiple Vulnerabilities (HT212814)	Nessus	Mobile Devices	9/21/2021	4/8/2024	high

Detections

Analytics

Plugins Search

critical

critical

medium

high

critical

high

critical

critical

critical

critical

critical

high