Vulnerability CVE-2013-2877 - CERT Civis.Net

Vulnerability Name:

CVE-2013-2877 (CCN-85531)

Assigned:

2013-07-09

Published:

2013-07-09

Updated:

2018-10-09

Summary:

parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.3 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

CWE-119
CWE-125

Vulnerability Consequences:

Denial of Service

References:

Source: CONFIRM
Type: Patch
ftp://xmlsoft.org/libxml2/libxml2-2.9.0.tar.gz

Source: MITRE
Type: CNA
CVE-2013-2877

Source: CONFIRM
Type: UNKNOWN
http://git.chromium.org/gitweb/?p=chromium/chromium.git;a=commit;h=e5d7f7e5dc21d3ae7be3cbb949ac4d8701e06de1

Source: CONFIRM
Type: Vendor Advisory
http://googlechromereleases.blogspot.com/2013/07/stable-channel-update.html

Source: CCN
Type: Google Chrome Releases Web site
Stable Channel Update

Source: SUSE
Type: UNKNOWN
SUSE-SU-2013:1627

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2013:1221

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2013:1246

Source: CCN
Type: RHSA-2014-0513
Moderate: libxml2 security update

Source: FULLDISC
Type: UNKNOWN
20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities

Source: CCN
Type: SA54017
Google Chrome Multiple Vulnerabilities

Source: CCN
Type: SA54112
Libxml2 Unspecified Denial of Service Vulnerability

Source: SECUNIA
Type: UNKNOWN
54172

Source: SECUNIA
Type: UNKNOWN
55568

Source: DEBIAN
Type: UNKNOWN
DSA-2724

Source: DEBIAN
Type: UNKNOWN
DSA-2779

Source: DEBIAN
Type: DSA-2724
chromium-browser -- several vulnerabilities

Source: DEBIAN
Type: DSA-2779
libxml2 -- denial of service

Source: CCN
Type: IBM Security Bulletin 1693458
Libxml2 vulnerabilities in Network Intrusion Prevention System (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660, CVE-2013-5211)

Source: CCN
Type: Oracle Critical Patch Update Advisory - January 2015
Oracle Critical Patch Update Advisory - January 2015

Source: CONFIRM
Type: UNKNOWN
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: BUGTRAQ
Type: UNKNOWN
20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities

Source: BID
Type: UNKNOWN
61050

Source: CCN
Type: BID-61050
Google Chrome CVE-2013-2877 Out of Bounds Denial of Service Vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-1904-1

Source: UBUNTU
Type: UNKNOWN
USN-1904-2

Source: CONFIRM
Type: UNKNOWN
http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Source: CONFIRM
Type: UNKNOWN
https://code.google.com/p/chromium/issues/detail?id=229019

Source: XF
Type: UNKNOWN
google-chrome-cve20132877-dos(85531)

Source: CCN
Type: Libxml2 GIT Repository
Libxml2

Source: CCN
Type: IBM Security Bulletin 5097607
IBM BladeCenter Advanced Management Module is affected by libxml2 vulnerabilities (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)

Source: CCN
Type: IBM Security Bulletin 5098306
Vulnerabilities in libxml2 affect System Networking Products (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)

Source: CCN
Type: IBM Security Bulletin 5098592
Multiple vulnerabilities in libxml2 affect IBM Flex System Manger (FSM) (CVE-2013-2877, CVE-2014-0191, CVE-2014-3660)

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2013-2877

Vulnerable Configuration:

Configuration 1:

cpe:/a:google:chrome:28.0.1500.0:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.2:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.3:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.4:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.5:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.6:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.8:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.9:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.10:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.11:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.12:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.13:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.14:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.15:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.16:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.17:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.18:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.19:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.20:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.21:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.22:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.23:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.24:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.25:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.26:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.27:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.28:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.29:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.31:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.32:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.33:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.34:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.35:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.36:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.37:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.38:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.39:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.40:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.41:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.42:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.43:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.44:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.45:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.46:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.47:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.48:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.49:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.50:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.51:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.52:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.53:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.54:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.56:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.58:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.59:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.60:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.61:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.62:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.63:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.64:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.66:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:28.0.1500.68:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:*:*:*:*:*:*:*:* (Version <= 28.0.1500.70)

OR cpe:/a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.5.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.5.8:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.8:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.9:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.11:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.12:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.13:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.14:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.17:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.18:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.20:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.21:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.22:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.23:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.24:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.25:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.28:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.29:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.30:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.31:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.7.2:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.7.3:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.7.4:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.7.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.7.6:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.7.7:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.7.8:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.8.0:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:*:rc1:*:*:*:*:*:* (Version <= 2.9.0)

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:6::client:*:*:*:*:*

Configuration RedHat 3:

cpe:/o:redhat:enterprise_linux:6::computenode:*:*:*:*:*

Configuration RedHat 4:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

Configuration RedHat 5:

cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

Configuration CCN 1:

cpe:/o:redhat:enterprise_linux:6::server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:6::workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_network_intrusion_prevention_system:4.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_network_intrusion_prevention_system:4.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_network_intrusion_prevention_system:4.5:*:*:*:*:*:*:*

OR cpe:/a:xmlsoft:libxml2:2.9.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:flex_system_manager:1.3.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:flex_system_manager:1.2.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:flex_system_manager:1.2.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:flex_system_manager:1.3.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_network_intrusion_prevention_system:4.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_network_intrusion_prevention_system:4.6.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_network_intrusion_prevention_system:4.6.2:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20132877	V	CVE-2013-2877	2022-06-30
oval:org.opensuse.security:def:10	P	autofs-5.1.3-7.3.1 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:24	P	ceph-common-15.2.9.83+g4275378de0-3.17.1 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:113359	P	ruby2.2-rubygem-nokogiri-1.6.8.1-1.3 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:113394	P	ruby2.7-rubygem-nokogiri-1.12.3-1.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:33119	P	Security update for ghostscript (Moderate)	2022-01-14
oval:org.opensuse.security:def:106800	P	Security update for net-snmp (Important)	2022-01-11
oval:org.opensuse.security:def:33108	P	Security update for java-1_7_1-ibm (Moderate) (in QA)	2022-01-04
oval:org.opensuse.security:def:34621	P	Security update for mariadb (Moderate)	2021-12-30
oval:org.opensuse.security:def:29452	P	Security update for xen (Moderate)	2021-11-29
oval:org.opensuse.security:def:31709	P	Security update for java-1_8_0-openjdk (Important)	2021-11-23
oval:org.opensuse.security:def:31697	P	Security update for opensc (Important)	2021-10-29
oval:org.opensuse.security:def:34581	P	Security update for opensc (Important)	2021-10-29
oval:org.opensuse.security:def:31698	P	Security update for transfig (Important)	2021-10-29
oval:org.opensuse.security:def:67547	P	Security update for ncurses (Moderate)	2021-10-20
oval:org.opensuse.security:def:33730	P	Security update for strongswan (Important)	2021-10-19
oval:org.opensuse.security:def:106766	P	ruby2.2-rubygem-nokogiri-1.6.8.1-1.3 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:26134	P	Security update for the Linux Kernel (Important)	2021-09-23
oval:org.opensuse.security:def:32151	P	Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)	2021-07-27
oval:org.opensuse.security:def:55221	P	Security update for the Linux Kernel (Important)	2021-07-20
oval:org.opensuse.security:def:33943	P	Security update for MozillaFirefox (Important)	2021-07-16
oval:org.opensuse.security:def:70787	P	Security update for ffmpeg (Important)	2021-07-14
oval:org.opensuse.security:def:26070	P	Security update for spice (Important)	2021-06-08
oval:org.opensuse.security:def:42638	P	libxml2-2.7.6-0.31.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36231	P	libxml2-2.7.6-0.31.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36509	P	libxml2-devel-2.7.6-0.31.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:70900	P	fetchmail-6.3.26-3.27 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:26065	P	Security update for polkit (Important)	2021-06-03
oval:org.opensuse.security:def:26058	P	Security update for postgresql10 (Moderate)	2021-05-27
oval:org.opensuse.security:def:26059	P	Security update for postgresql12 (Moderate)	2021-05-27
oval:org.opensuse.security:def:55899	P	Security update for djvulibre (Important)	2021-05-19
oval:org.opensuse.security:def:33899	P	Security update for permissions (Important)	2021-04-29
oval:org.opensuse.security:def:32064	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-04-07
oval:org.opensuse.security:def:33107	P	Security update for MozillaFirefox (Important)	2021-03-31
oval:org.opensuse.security:def:33787	P	Security update for nghttp2 (Important)	2021-03-24
oval:org.opensuse.security:def:54776	P	Security update for glib2 (Important)	2021-03-16
oval:org.opensuse.security:def:26206	P	Security update for the Linux Kernel (Important)	2021-03-09
oval:org.opensuse.security:def:57175	P	Security update for openldap2 (Important)	2021-03-03
oval:org.opensuse.security:def:26199	P	Security update for ImageMagick (Moderate)	2021-02-25
oval:org.opensuse.security:def:26198	P	Security update for avahi (Moderate)	2021-02-23
oval:org.opensuse.security:def:26122	P	Security update for python-urllib3 (Moderate)	2021-02-03
oval:org.opensuse.security:def:26210	P	Security update for MozillaFirefox (Important)	2021-01-12
oval:org.opensuse.security:def:29395	P	Security update for openssh (Moderate)	2021-01-05
oval:org.opensuse.security:def:25984	P	Security update for cyrus-sasl (Important)	2020-12-28
oval:org.opensuse.security:def:29309	P	Security update for MozillaFirefox (Critical)	2020-12-21
oval:org.opensuse.security:def:55780	P	Security update for openssl (Important)	2020-12-11
oval:org.opensuse.security:def:32007	P	Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP3) (Important)	2020-12-07
oval:org.opensuse.security:def:33875	P	Security update for python-cryptography (Moderate)	2020-12-04
oval:org.opensuse.security:def:103199	P	ruby2.5-rubygem-nokogiri-1.8.2-1.16 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:89544	P	ruby2.5-rubygem-nokogiri-1.8.2-1.16 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:96509	P	ruby2.5-rubygem-nokogiri-1.8.2-1.16 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:31915	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:32307	P	Security update for python (Important)	2020-12-01
oval:org.opensuse.security:def:32473	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:33198	P	logrotate on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33573	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:28586	P	Security update for libxml2	2020-12-01
oval:org.opensuse.security:def:25856	P	Security update for gd (Important)	2020-12-01
oval:org.opensuse.security:def:26498	P	Security update for nextcloud (Moderate)	2020-12-01
oval:org.opensuse.security:def:26400	P	Security update for Chromium (Important)	2020-12-01
oval:org.opensuse.security:def:26737	P	libadns1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27194	P	liblzo2-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26483	P	Security update for chromium (Moderate)	2020-12-01
oval:org.opensuse.security:def:26828	P	system-config-printer on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26974	P	libsss_idmap0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27340	P	yast2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27714	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:27869	P	Security update for python-logilab-common	2020-12-01
oval:org.opensuse.security:def:29178	P	Security update for microcode_ctl (Important)	2020-12-01
oval:org.opensuse.security:def:29537	P	Security update for MozillaFirefox (Moderate)	2020-12-01
oval:org.opensuse.security:def:29832	P	Security update for jpeg (Moderate)	2020-12-01
oval:org.opensuse.security:def:27229	P	libxml2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54398	P	w3m on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55055	P	aaa_base on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55706	P	Security update for cups-filters (Moderate)	2020-12-01
oval:org.opensuse.security:def:30532	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:32363	P	Security update for sudo (Moderate)	2020-12-01
oval:org.opensuse.security:def:32517	P	g3utils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33333	P	Security update for curl (Important)	2020-12-01
oval:org.opensuse.security:def:26357	P	Security update for enigmail (Important)	2020-12-01
oval:org.opensuse.security:def:26512	P	Security update for pdns-recursor (Moderate)	2020-12-01
oval:org.opensuse.security:def:30569	P	Security update for libxml2	2020-12-01
oval:org.opensuse.security:def:26484	P	Security update for chromium (Important)	2020-12-01
oval:org.opensuse.security:def:26776	P	libzip1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:64113	P	Security update for libzypp (Moderate)	2020-12-01
oval:org.opensuse.security:def:26540	P	enscript on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26877	P	cups on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27472	P	libpng-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27137	P	gnutls on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27422	P	java-1_7_1-ibm-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27767	P	Security update for IBM Java	2020-12-01
oval:org.opensuse.security:def:27913	P	Security update for xen (Moderate)	2020-12-01
oval:org.opensuse.security:def:29690	P	Security update for exempi (Moderate)	2020-12-01
oval:org.opensuse.security:def:29850	P	Security update for Linux Kernel	2020-12-01
oval:org.opensuse.security:def:64200	P	ruby2.5-rubygem-nokogiri on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54538	P	libdcerpc-binding0-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27507	P	libxml2-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:32412	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:33428	P	Security update for clamav, clamav-db, clamav-debuginfo, clamav-debugsource	2020-12-01
oval:org.opensuse.security:def:25781	P	Security update for libqt4 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26410	P	Security update for freexl (Important)	2020-12-01
oval:org.opensuse.security:def:26556	P	gmime on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27136	P	gnome-screensaver on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26262	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26635	P	quagga on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26790	P	ofed on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:57249	P	Security update for libxml2	2020-12-01
oval:org.opensuse.security:def:26274	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26624	P	pam_krb5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26916	P	hplip on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:67447	P	Security update for SUSE Manager Server 4.1 (Important)	2020-12-01
oval:org.opensuse.security:def:27148	P	ibutils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27479	P	libreoffice-help-cs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27816	P	Security update for net-snmp	2020-12-01
oval:org.opensuse.security:def:27612	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:29098	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:29744	P	Security update for gcc43 (Moderate)	2020-12-01
oval:org.opensuse.security:def:29894	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:54375	P	rsync on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55506	P	Security update for ntp (Moderate)	2020-12-01
oval:org.opensuse.security:def:55818	P	Security update for ghostscript-library (Important)	2020-12-01
oval:org.opensuse.security:def:25780	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:31783	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:32451	P	Security update for xen (Moderate)	2020-12-01
oval:org.opensuse.security:def:27647	P	Security update for libxml2	2020-12-01
oval:org.opensuse.security:def:33485	P	Security update for libpng	2020-12-01
oval:org.opensuse.security:def:33836	P	Security update for gpg2 (Important)	2020-12-01
oval:org.opensuse.security:def:33155	P	libicu-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25792	P	Security update for libvirt (Moderate)	2020-12-01
oval:org.opensuse.security:def:26459	P	Security update for chromium (Important)	2020-12-01
oval:org.opensuse.security:def:26343	P	Security update for MozillaThunderbird (Important)	2020-12-01
oval:org.opensuse.security:def:26688	P	ecryptfs-utils-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26834	P	tomcat6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:29097	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:26402	P	Security update for irssi (Moderate)	2020-12-01
oval:org.opensuse.security:def:26775	P	libxslt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26930	P	kernel-default on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33194	P	libxml2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27212	P	librpcsecgss on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27563	P	rubygem-rdoc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27855	P	Security update for popt	2020-12-01
oval:org.opensuse.security:def:29109	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:29793	P	Security update for gtk2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:28551	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:54376	P	rsyslog on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54949	P	libwireshark8 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55614	P	Security update for polkit (Moderate)	2020-12-01
oval:org.mitre.oval:def:26734	V	Allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly	2014-10-27
oval:org.mitre.oval:def:25431	P	SUSE-SU-2014:0150-1 -- Security update for libxml2	2014-09-08
oval:org.mitre.oval:def:25457	P	SUSE-SU-2013:1627-1 -- Security update for libxml2	2014-09-08
oval:org.mitre.oval:def:25714	P	SUSE-SU-2013:1625-1 -- Security update for libxml2	2014-09-08
oval:org.mitre.oval:def:25192	P	ELSA-2014:0513: libxml2 security update (Moderate)	2014-09-01
oval:org.mitre.oval:def:18347	P	USN-1904-1 -- libxml2 vulnerabilities	2014-07-07
oval:org.mitre.oval:def:18320	P	USN-1904-2 -- libxml2 regression	2014-06-30
oval:org.mitre.oval:def:24407	P	RHSA-2014:0513: libxml2 security update (Moderate)	2014-06-30
oval:org.mitre.oval:def:20048	P	DSA-2724-1 chromium-browser - several	2014-06-23
oval:org.mitre.oval:def:20088	P	DSA-2779-1 libxml2 - denial of service	2014-06-23
oval:com.redhat.rhsa:def:20140513	P	RHSA-2014:0513: libxml2 security update (Moderate)	2014-05-19
oval:org.opensuse.security:def:79883	P	Security update for libxml2	2014-01-06
oval:com.ubuntu.precise:def:20132877000	V	CVE-2013-2877 on Ubuntu 12.04 LTS (precise) - medium.	2013-07-10