Fedora 14 : libxml-1.8.17-27.fc14 (2011-7856)

NASLDB: Fedora 14 : libxml-1.8.17-27.fc14 (2011-7856)

General

ID: 55495
Name: Fedora 14 : libxml-1.8.17-27.fc14 (2011-7856)

Summary: Checks rpm output for the updated package

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: –

Port: 0
Family: Fedora Local Security Checks
Type: Local

Description

This update addresses CVE-2011-1944 (heap-based buffer overflow by
adding a new namespace node to an existing nodeset or merging
nodesets). It is described in detail at
http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-an
d-interesting.html

It also fixes the broken xpath implementation, which was crashing in
the regression test suite on 32-bit architectures and failing some of
the tests on all architectures.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2011-1944
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2011/06/03
Plugin Release: 2011/07/05

Plugin

Version: 1.5
Filename: fedora_2011-7856.nasl
Filesize: 3286 bytes
MD5 Hash: dd62e960852cb21ccde3ed4e1e30b09a

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list
Dependencies: "ssh_get_info.nasl"

Letzte Plugins

Letzte Plugins

scip AG