This update for libxml2 fixes the following security issues :

  - CVE-2017-9050: A heap-based buffer over-read in     xmlDictAddString (bsc#1039069, bsc#1039661)

  - CVE-2017-9049: A heap-based buffer overflow in     xmlDictComputeFastKey (bsc#1039066)

  - CVE-2017-9048: A stack overflow vulnerability in     xmlSnprintfElementContent (bsc#1039063)

  - CVE-2017-9047: A stack overflow vulnerability in     xmlSnprintfElementContent (bsc#1039064)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the     xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as     PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.
    (CVE-2017-9049)

Note that Nessus relies on the presence of the package as reported by the vendor.

libxml2 developers report :

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.

A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about 'size' many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash.

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash.
This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash.
This vulnerability exists because of an incomplete fix for CVE-2016-1839.

The version of Apple iOS running on the mobile device is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208143 security advisory.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
100884	openSUSE Security Update : libxml2 (openSUSE-2017-711)	Nessus	SuSE Local Security Checks	2017/6/20	2021/1/19	high
221787	Linux Distros Unpatched Vulnerability : CVE-2017-9049	Nessus	Misc.	2025/3/4	2025/8/21	high
105216	FreeBSD : libxml2 -- Multiple Issues (76e59f55-4f7a-4887-bcb0-11604004163a)	Nessus	FreeBSD Local Security Checks	2017/12/14	2025/11/12	critical
700542	Apple iOS < 11.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2019/4/17	2019/4/17	critical

検出

プラグインの検索

high

high

critical

critical