Oval Definition:oval:org.opensuse.security:def:20130339
Revision Date:2022-05-20Version:1
Title:CVE-2013-0339
Description:

libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because libxml2 already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed and each affected application would need its own CVE.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2013-0339
Mitre CVE-2013-0339
SUSE CVE-2013-0339
SUSE-SU-2013:0743-1
SUSE-SU-2013:0743-1
SUSE-SU-2013:0744-1
SUSE-SU-2013:0744-1
SUSE-SU-2013:1625-1
SUSE-SU-2013:1625-1
SUSE-SU-2013:1627-1
SUSE-SU-2013:1627-1
Platform(s):SLE SDK 10 SP4 for IBM iSeries and IBM pSeries
SLE SDK 10 SP4 for IBM zSeries
SLE SDK 10 SP4 for IPF
SLE SDK 10 SP4 for x86
SLE SDK 10 SP4 for X86-64
SUSE CORE 9 for AMD64 and Intel EM64T
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T
SUSE Linux Enterprise Desktop 10 SP4 for x86
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit
SUSE Linux Enterprise Server 10 SP3 LTSS for x86
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP4 for IBM POWER
SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit
SUSE Linux Enterprise Server 10 SP4 for IPF
SUSE Linux Enterprise Server 10 SP4 for x86
SUSE Linux Enterprise Server 10 SP4 LTSS for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP4 LTSS for IBM zSeries 64bit
SUSE Linux Enterprise Server 10 SP4 LTSS for x86
SUSE Linux Enterprise Server 11 SP1 for Teradata
SUSE Linux Enterprise Server 11 SP1 LTSS
SUSE Linux Enterprise Server 11 SP1-LTSS
SUSE Linux Enterprise Server 11 SP1-TERADATA
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP2 for VMware
SUSE Linux Enterprise Server for SAP Applications 11 SP1-LTSS
SUSE Linux Enterprise Server for SAP Applications 11 SP1-TERADATA
SUSE Linux Enterprise Server for SAP Applications 11 SP2
SUSE Linux Enterprise Server for VMWare 11 SP2
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Linux Enterprise Teradata 10 SP3 for AMD64 and Intel EM64T
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
    • Definition Synopsis
  • Release Information
  • sles10-sp3-ltss is installed
  • AND
  • libxml2-32bit less than 2.6.23-15.39.1
  • OR libxml2-devel-32bit less than 2.6.23-15.39.1
  • OR libxml2-devel less than 2.6.23-15.39.1
  • OR libxml2-python less than 2.6.23-15.39.1
  • OR libxml2 less than 2.6.23-15.39.1
  • OR Package Information
  • sles10-sp4-ltss is installed
  • AND
  • libxml2-32bit less than 2.6.23-15.39.1
  • OR libxml2-devel-32bit less than 2.6.23-15.39.1
  • OR libxml2-devel less than 2.6.23-15.39.1
  • OR libxml2-python less than 2.6.23-15.39.1
  • OR libxml2 less than 2.6.23-15.39.1
  • OR Package Information
  • sles10-sp4 is installed
  • libxml2-32bit less than 2.6.23-15.37.1
  • OR libxml2-64bit less than 2.6.23-15.37.1
  • OR libxml2-devel-32bit less than 2.6.23-15.37.1
  • OR libxml2-devel-64bit less than 2.6.23-15.37.1
  • OR libxml2-devel less than 2.6.23-15.37.1
  • OR libxml2-python less than 2.6.23-15.37.1
  • OR libxml2-x86 less than 2.6.23-15.37.1
  • OR libxml2 less than 2.6.23-15.37.1
  • OR
  • sles10-sp4-sdk is installed
  • AND libxml2-test less than 2.6.23-15.37.1
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND
  • libxml2-devel-2.7.6-0.23 is installed
  • OR libxml2-devel-32bit-2.7.6-0.23 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP2 is installed
  • OR SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP1-LTSS is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND
  • libxml2-devel-2.7.6-0.23 is installed
  • OR libxml2-devel-32bit-2.7.6-0.23 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP2 is installed
  • OR SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP1-LTSS is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP1-TERADATA is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP1-LTSS is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.31 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.25 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND
  • libxml2-devel-2.7.6-0.23 is installed
  • OR libxml2-devel-32bit-2.7.6-0.23 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP1-TERADATA is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.23 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP1-LTSS is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.31 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23 is installed
  • OR libxml2-32bit-2.7.6-0.25 is installed
  • OR libxml2-doc-2.7.6-0.23 is installed
  • OR libxml2-python-2.7.6-0.23 is installed
  • OR libxml2-x86-2.7.6-0.25 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23.1 is installed
  • OR libxml2-32bit-2.7.6-0.23.1 is installed
  • OR libxml2-python-2.7.6-0.23.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • AND
  • libxml2-2.7.6-0.23.1 is installed
  • OR libxml2-32bit-2.7.6-0.31.1 is installed
  • OR libxml2-doc-2.7.6-0.23.1 is installed
  • OR libxml2-python-2.7.6-0.23.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • AND
  • libxml2-2.7.6-0.23.1 is installed
  • OR libxml2-32bit-2.7.6-0.23.1 is installed
  • OR libxml2-doc-2.7.6-0.23.1 is installed
  • OR libxml2-python-2.7.6-0.23.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23.1 is installed
  • OR libxml2-32bit-2.7.6-0.23.1 is installed
  • OR libxml2-doc-2.7.6-0.23.1 is installed
  • OR libxml2-python-2.7.6-0.23.1 is installed
  • OR libxml2-x86-2.7.6-0.25.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND
  • libxml2-devel-2.7.6-0.23.1 is installed
  • OR libxml2-devel-32bit-2.7.6-0.23.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • OR SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • AND
  • libxml2-2.7.6-0.23.1 is installed
  • OR libxml2-32bit-2.7.6-0.23.1 is installed
  • OR libxml2-doc-2.7.6-0.23.1 is installed
  • OR libxml2-python-2.7.6-0.23.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP2 is installed
  • AND
  • libxml2-2.7.6-0.23.1 is installed
  • OR libxml2-32bit-2.7.6-0.23.1 is installed
  • OR libxml2-doc-2.7.6-0.23.1 is installed
  • OR libxml2-python-2.7.6-0.23.1 is installed
  • OR libxml2-x86-2.7.6-0.25.1 is installed
    • BACK