oval:org.mitre.oval:def:13681

Definition Id: oval:org.mitre.oval:def:13681

Oval ID:	oval:org.mitre.oval:def:13681
Title:	DSA-1859-1 libxml2 -- several
Description:	Rauli Kaksonen, Tero Rontti and Jukka Taimisto discovered several vulnerabilities in libxml2, a library for parsing and handling XML data files, which can lead to denial of service conditions or possibly arbitrary code execution in the application using the library. The Common Vulnerabilities and Exposures project identifies the following problems: An XML document with specially-crafted Notation or Enumeration attribute types in a DTD definition leads to the use of a pointers to memory areas which have already been freed. Missing checks for the depth of ELEMENT DTD definitions when parsing child content can lead to extensive stack-growth due to a function recursion which can be triggered via a crafted XML document. For the oldstable distribution, this problem has been fixed in version 2.6.27.dfsg-6+etch1. For the stable distribution, this problem has been fixed in version 2.6.32.dfsg-5+lenny1. For the testing and unstable distribution, this problem will be fixed soon. We recommend that you upgrade your libxml2 packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1859-1 CVE-2009-2416 CVE-2009-2414	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	libxml2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND libxml2-doc DPKG is earlier than 2.6.32.dfsg-5+lenny1 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section libxml2 DPKG is earlier than 2.6.32.dfsg-5+lenny1 AND libxml2-utils DPKG is earlier than 2.6.32.dfsg-5+lenny1 AND python-libxml2 DPKG is earlier than 2.6.32.dfsg-5+lenny1 AND libxml2-dbg DPKG is earlier than 2.6.32.dfsg-5+lenny1 AND libxml2-dev DPKG is earlier than 2.6.32.dfsg-5+lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND libxml2-doc DPKG is earlier than 2.6.27.dfsg-6+etch1 AND libxml2 DPKG is earlier than 2.6.27.dfsg-6+etch1 AND libxml2-utils DPKG is earlier than 2.6.27.dfsg-6+etch1 AND python-libxml2 DPKG is earlier than 2.6.27.dfsg-6+etch1 AND libxml2-dbg DPKG is earlier than 2.6.27.dfsg-6+etch1 AND libxml2-dev DPKG is earlier than 2.6.27.dfsg-6+etch1

Definition Id: oval:org.mitre.oval:def:6513

Oval ID:	oval:org.mitre.oval:def:6513
Title:	Debian GNU/Linux 5.0 is installed
Description:	Debian GNU/Linux 5.0 (lenny) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:5.0	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 5.0 is installed
Referenced By:
oval:org.mitre.oval:def:13681

Definition Id: oval:org.mitre.oval:def:6461

Oval ID:	oval:org.mitre.oval:def:6461
Title:	Debian GNU/Linux 4.0 is installed.
Description:	Debian GNU/Linux 4.0 (etch) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:4.0	Version:	9
Platform(s):	Debian GNU/Linux 4.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 4.0 is installed
Referenced By:
oval:org.mitre.oval:def:13681

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0385s

Facebook rss twitter linkedin mail