Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0178-1

Опубликовано: 20 янв. 2016
Источник: suse-cvrf

Описание

Security update for libxml2

This update for libxml2 fixes the following security issue:

  • CVE-2015-8710: Parsing short unclosed HTML comment could cause uninitialized memory access, which allowed remote attackers to read contents from previous HTTP requests depending on the application (bsc#960674)

Список пакетов

SUSE Linux Enterprise Desktop 12
libxml2-2-2.9.1-17.1
libxml2-2-32bit-2.9.1-17.1
libxml2-tools-2.9.1-17.1
python-libxml2-2.9.1-17.1
SUSE Linux Enterprise Desktop 12 SP1
libxml2-2-2.9.1-17.1
libxml2-2-32bit-2.9.1-17.1
libxml2-tools-2.9.1-17.1
python-libxml2-2.9.1-17.1
SUSE Linux Enterprise Server 12
libxml2-2-2.9.1-17.1
libxml2-2-32bit-2.9.1-17.1
libxml2-doc-2.9.1-17.1
libxml2-tools-2.9.1-17.1
python-libxml2-2.9.1-17.1
SUSE Linux Enterprise Server 12 SP1
libxml2-2-2.9.1-17.1
libxml2-2-32bit-2.9.1-17.1
libxml2-doc-2.9.1-17.1
libxml2-tools-2.9.1-17.1
python-libxml2-2.9.1-17.1
SUSE Linux Enterprise Server for SAP Applications 12
libxml2-2-2.9.1-17.1
libxml2-2-32bit-2.9.1-17.1
libxml2-doc-2.9.1-17.1
libxml2-tools-2.9.1-17.1
python-libxml2-2.9.1-17.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libxml2-2-2.9.1-17.1
libxml2-2-32bit-2.9.1-17.1
libxml2-doc-2.9.1-17.1
libxml2-tools-2.9.1-17.1
python-libxml2-2.9.1-17.1
SUSE Linux Enterprise Software Development Kit 12
libxml2-devel-2.9.1-17.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libxml2-devel-2.9.1-17.1

Ссылки

Описание

The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-17.1
SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-17.1
SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-17.1
SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-17.1
Ссылки