CVE-2013-0339

{"id": "CVE-2013-0339", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-01-21T18:55:09.053", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html", "source": "secalert@redhat.com"}, {"url": "http://openwall.com/lists/oss-security/2013/02/21/24", "source": "secalert@redhat.com"}, {"url": "http://openwall.com/lists/oss-security/2013/02/22/3", "source": "secalert@redhat.com"}, {"url": "http://seclists.org/oss-sec/2013/q4/182", "source": "secalert@redhat.com"}, {"url": "http://seclists.org/oss-sec/2013/q4/184", "source": "secalert@redhat.com"}, {"url": "http://seclists.org/oss-sec/2013/q4/188", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/52662", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/54172", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/55568", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2013/dsa-2652", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2013/04/12/6", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-1904-1", "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-1904-2", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=915149", "source": "secalert@redhat.com"}, {"url": "https://git.gnome.org/browse/libxml2/commit/?id=4629ee02ac649c27f9c0cf98ba017c6b5526070f", "tags": ["Exploit", "Patch"], "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://openwall.com/lists/oss-security/2013/02/21/24", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://openwall.com/lists/oss-security/2013/02/22/3", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/oss-sec/2013/q4/182", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/oss-sec/2013/q4/184", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/oss-sec/2013/q4/188", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/52662", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/54172", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/55568", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2013/dsa-2652", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2013/04/12/6", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ubuntu.com/usn/USN-1904-1", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ubuntu.com/usn/USN-1904-2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=915149", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://git.gnome.org/browse/libxml2/commit/?id=4629ee02ac649c27f9c0cf98ba017c6b5526070f", "tags": ["Exploit", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because libxml2 already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed and each affected application would need its own CVE."}, {"lang": "es", "value": "libxml2 hasta 2.9.1 no controla correctamente la expansi\u00f3n de entidades externas a menos que un desarrollador de aplicaciones utilice la funci\u00f3n xmlSAX2ResolveEntity o xmlSetExternalEntityLoader, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (consumo de recursos), enviar peticiones HTTP a los servidores de la intranet, o leer ficheros arbitrarios mediante un documento XML manipulada, tambi\u00e9n conocido una entidades externas XML (XXE) tema. NOTA: se podr\u00eda argumentar que debido a que libxml2 ya ofrece la posibilidad de desactivar la expansi\u00f3n entidad externa, la responsabilidad de la soluci\u00f3n de este problema se encuentra con los desarrolladores de aplicaciones, de acuerdo con este argumento, esta entrada debe ser rechazada y cada aplicaci\u00f3n afectada tendr\u00eda su propio CVE."}], "lastModified": "2024-11-21T01:47:20.367", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18BCA403-8F0F-4564-BE7E-1DE10408B54B", "versionEndIncluding": "2.9.1"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2524F0A-AC51-44CB-A4ED-09B70C7E19A9"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "569432A3-3145-40CD-BFA8-6B70BE47F3E1"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9635F852-0577-45F6-A301-8DF8108860A6"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2E409CD-F17C-4A1F-8F84-5E495B2D4652"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E08C8CA8-9F4E-4591-9DDC-C1102F691647"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E973C066-2745-49B5-9FDA-CCD6CE0633B6"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8070C75-15A8-4A9D-AA0F-4D92CC2691ED"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6EDF7C8-50C8-4A20-975E-06B2D528E2B6"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE252FCD-647B-4586-A8EC-6BB095BB3E95"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5291EC59-4016-40B3-BF08-292080D19243"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A84CCC4-6F7E-4563-AE45-AF6B45A7D1B4"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2E74FC5-77EE-42A9-B2F7-6C4FC2F0CD20"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FADFC1E5-2F83-484B-852B-D71B7D1C5A80"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2779B6F-AA9F-4D2D-9DD1-9BC9A9042DD7"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B172A659-DC83-483D-8DBE-637E89DF3DFB"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3FD4D7C-1826-4BC9-BCEA-6FB8D7738D51"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52800CB4-6389-4AB0-A098-8F465CF4A733"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:1.8.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D499267-5C14-4888-92C7-2ECE909BD9F6"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "586C0FAB-E288-4EFB-8946-4535971F23F9"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15236DDC-0095-4253-9113-61F76EFC0769"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98F95AB1-D3D0-4E39-B135-4B55991845CE"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "392E4AA7-00D2-45B1-9FA7-C1C7C37431F0"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7839A86-59AA-400C-BF29-18E612B8EB4D"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F9A211A-5C44-4BDC-9676-3B7B937835B9"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BECA085A-BEF1-4AD2-ABBA-069CE2642796"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E66BF7BC-5B5C-40BB-B826-3CC9DBAB53D0"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F330D609-31EB-4B4C-B007-ACEABA557F54"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9E2F05B-B298-489C-9E44-62E0A199E148"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "070B2F1F-9A99-4A20-9BA9-CF175D482DA6"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25DC5AE4-9DEA-4828-96F0-57BACB6C9B25"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDE26E6D-53FF-4001-8F25-C112635CB74E"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1210A8D-5359-4FD4-963F-506200AA20AE"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA748E50-798F-40EA-B252-0A166DEEB120"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.2.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5B9E7CC-D552-4C9A-909E-42D375452E09"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06C20B5C-16E7-4C1B-A2DB-8EB4B9A7045D"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7A901B3-B0F4-4D2B-8CAF-25938219B657"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12FCBA01-D739-4BA2-83F5-D41A6DF91F1F"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFC8C43D-84C7-4C0C-8DD1-66206D665C35"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5E60C1B4-BBC1-4E2B-8323-A7E059EF6BEE"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B677850-4FE9-4522-ADAE-42C5D17D4A7D"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BB7931B-55AA-4735-8AAB-9F3A9E9C0123"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4A5B9AF-7F82-4EEC-A776-587C6DD44448"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94D33392-DD5C-4704-BECF-69D416F9F2C0"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1BA896F-07D7-4B93-939B-B6CDD1DCA87C"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "647CA5AD-5AC2-448E-8445-62837F413361"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37D4241B-A328-45F0-9FAB-CEE20DC7432E"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAAD77C4-84EC-4924-90F8-35A2375AA6A9"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A124C5A-C72C-4623-925E-378FF40671EF"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.3.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8ACD2FD4-E884-4FC5-842B-86AAE06D9E05"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14A9036D-1474-4097-9E70-09F7BBA2826C"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8884CF6-2F5B-465F-841B-3C69EC3BE3BA"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A699B966-3756-4D5B-8693-0678EEDD8AD0"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1E50FED-4BAD-4D04-98C3-C2427E086C1B"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70880522-BBC0-4D5C-8DA3-245E189FA1C0"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A8BA1A0-F8E7-4B93-B667-D012C91F831E"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27662848-9CD5-43BC-9A1B-8C6EBACCCC21"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C967E50C-E7AA-49D0-A055-20CA083CA232"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA398ACA-73C2-4093-AD35-E30161C96C25"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "757B5A74-6B7B-4F01-9891-9F9E510074C9"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C10CC4C-3A9C-4AD0-A7C1-ACF781BF20D5"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E67FD94-4E96-4FCC-990B-4C0A5C599ED0"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E7DDE27-9DE8-4E45-AFA2-AFFEA8F0D917"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92CEEDA7-5DFC-4DB0-989E-F356E5CF65A9"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25D60B58-3558-4244-A5B3-8D16F53A9588"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5DB409B-795F-4F8A-85E1-0B4E66AE9D48"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "457C47ED-A429-42AE-9FF9-978D605BACFE"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C20B9D5-9E10-4B6D-8095-B2A63EDB8D16"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9087E4FE-661F-4803-BB3B-09D2699265E5"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C2D01CF-9FCE-41F8-997E-EA9BDCCD8C76"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84E1C7A6-DCA7-4760-B1B6-EFB256978CFC"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F1E7CFF-E4B3-4B31-BE23-C187544E9488"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81EDD077-5183-4588-8DB1-93A0597AAA34"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "530FE28C-0D51-4BF9-AE43-D65F9913B48B"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F030053E-2292-42E2-8435-0CFBDDE688DB"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0258377-DD8B-4FA6-B075-E8489C83CEAE"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69E0BD23-38C6-43C0-870F-00B13F7C91D3"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3D3350E-5186-4DC8-9D1B-59068A469496"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F76783D0-63F8-48A7-85FE-E5E8DBFA223D"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.4.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52AE89B2-C1A3-48C8-AEB5-4B0D757AE361"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8ACA170D-21DB-47CD-AD73-2DEB2A2439F1"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFC48A66-7D1F-4446-BC50-6C1A1DF819E8"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.5.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0A86D90-C64E-4850-8D6E-94D3C0789241"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.5.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06A50725-AC7A-4FDB-887A-3DCB369C943D"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D463EC3C-88F1-46D9-ADB6-6283DC23B0B6"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43F8E361-E6D3-4666-B18D-928D550FD5D2"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6948CD9-8489-46BA-9159-24C842490702"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35C43087-760E-482A-B34E-141A29AC57A4"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "669211F7-90EA-47AB-A787-34DD79DF8E25"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "025B16D8-1023-4D47-BADD-C1E838B47D88"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "320E691F-D417-4D81-A223-C46FEFFD908A"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3B06B40-327D-4EFA-AD19-DA1CA7D50B4F"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB8BEC58-AB2A-4953-A2E8-338EB894A494"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABDE6C9A-4F24-42B4-8AA3-3EBC97190322"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44FB2813-BE9F-46A8-864B-435D883CA0FA"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9DF1336-F831-4507-B45E-574BDE8AA8BA"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33268B2F-3591-48D9-B123-92E3ABF157F1"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0830367A-9FB3-4291-88C0-38A471DFD22B"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73E4EB1B-2E8B-4504-AB05-F4D4E6B038E9"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5815E25-5305-4A32-81B3-89DB1D5C1AC0"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AD69C98-11AB-4BB5-A91A-F029BA0E1DB1"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98CF3A74-B9F8-4689-B81C-F579D827DA5C"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DBD9C7D-CD0B-4B5B-BEC2-F67610DEDE2B"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "798F7A01-F006-4589-82F8-943F81015693"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A1C90C5-1B77-4BE5-ACDA-1F15D3F2A000"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36940C55-BFD4-4C77-A26B-C0F273EAC2EC"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8ECB753E-430C-4DBD-9063-506E749A21CF"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EBD3E93-1624-4B1D-8F9A-5683ADA4983E"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "551B91B8-7A5A-4E5D-AAED-76705F8A2829"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D8135B1-FB22-4755-A5ED-CDB16E3E85A3"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B4685BF-394A-4426-980A-2B1D37737C06"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77A68008-7392-4BE4-AB30-24D2BA124E3A"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63F37BF5-D4D2-43AB-841A-E9AC32A68452"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB8A074B-069A-4520-8E3C-AB614C31B68A"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D77DE5FD-060A-4AD6-A925-4E9EF186C835"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.6.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7069A49C-038C-4E7B-AF03-4D90D5734414"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87E895B9-5AF7-4A1F-B740-B3E13DE3254E"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FD29EFD-1ADB-4349-8E7D-EA6B34B0F6DE"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC720A50-9EF5-4B73-86D1-AE87D402611E"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "464942E8-EDF3-4ECB-B907-FFCDBC9079C0"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1246C0E-DCAC-405E-ADCE-3D16D659C567"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5703D8EC-259B-49C3-AADE-916227DEB96F"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "184B40E3-28FD-49A4-9560-5E26293D7D08"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.7.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CCE8BBA-6721-4257-9F2E-23AEB104564E"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.7.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF2A3107-5F12-407E-9009-7F42B09299E4"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8928F415-C124-4B4A-9D59-40AC6845AFD1"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "955673D9-2912-48A2-93C9-10430290A4AF"}, {"criteria": "cpe:2.3:a:xmlsoft:libxml2:2.9.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "268661C2-7A45-4743-8A09-48B3EE21212E"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2076871-2E80-4605-A470-A41C1A8EC7EE"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFAA48D9-BEB4-4E49-AD50-325C262D46D9"}, {"criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244"}, {"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA"}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*", "vulnerable": true, "matchCriteriaId": "35BBD83D-BDC7-4678-BE94-639F59281139"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}