CVE-2014-3660
published 2014-11-04CVE-2014-3660: parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent…
PriorityP428medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.78%
89.9th percentile
parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.
Affected
147 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | apple_tv | — | — |
| apple | ios | — | — |
| apple | iphone_os | <= 9.2.1 | — |
| apple | mac_os_x | <= 10.10.4 | — |
| apple | mac_os_x | <= 10.11.3 | — |
| apple | os_x_yosemite_v10.10.5_and_security_update_2015-006 | — | — |
| apple | tvos | <= 9.1 | — |
| apple | watchos | <= 2.1 | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | libxml2 | < libxml2 2.9.3+dfsg1-1 (bookworm) | libxml2 2.9.3+dfsg1-1 (bookworm) |
| debian | libxml2 | < libxml2 2.9.2+dfsg1-1 (bookworm) | libxml2 2.9.2+dfsg1-1 (bookworm) |
| hp | icewall_federation_agent | — | — |
| hp | icewall_file_manager | — | — |
| nokogiri | nokogiri | >= 1.6.0 < 1.6.7.1 | 1.6.7.1 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_hpc_node | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_workstation | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
ghsa5.0MEDIUM
osv5.0MEDIUM
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libxml2: CPU exhaustion when processing specially crafted XML input
vendor_redhat·2015-12-01·CVSS 5.0
CVE-2015-5312 [MEDIUM] libxml2: CPU exhaustion when processing specially crafted XML input
libxml2: CPU exhaustion when processing specially crafted XML input
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU.
Package: libxml2 (Red Hat Enterprise Linux 5) - Will not fix
Package: libxml2 (Red Hat JBoss Enterprise Web Server 2) - Will not fix
VMware
VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
vendor_vmware·2015-01-27·CVSS 6.4
CVE-2014-3513 [MEDIUM] VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
VMSA-2015-0001: VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues
a. VMware ESXi, Workstation, Player, and Fusion host privilege escalation vulnerability VMware ESXi, Workstation, Player and Fusion contain an arbitrary file write issue. Exploitation this issue may allow for privilege escalation on the host. The vulnerability does not allow for privilege escalation from the guest Operating System to the host or vice-versa. This means that host memory can not be manipulated from the Guest Operating System. Mitigation For ESXi to be affected, permissions must have been added to ESXi (or a vCenter Server managing it) for a virtual machine administrator role or greater. VMware would like to thank Shanon Olsson for reporting this issue to us through JP
Debian
CVE-2015-5312: libxml2 - The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does...
vendor_debian·2015·CVSS 5.0
CVE-2015-5312 [MEDIUM] CVE-2015-5312: libxml2 - The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does...
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
Scope: local
bookworm: resolved (fixed in 2.9.3+dfsg1-1)
bullseye: resolved (fixed in 2.9.3+dfsg1-1)
forky: resolved (fixed in 2.9.3+dfsg1-1)
sid: resolved (fixed in 2.9.3+dfsg1-1)
trixie: resolved (fixed in 2.9.3+dfsg1-1)
Ubuntu
libxml2 vulnerability
vendor_ubuntu·2014-10-27
CVE-2014-3660 libxml2 vulnerability
Title: libxml2 vulnerability
Summary: libxml2 could be made to consume resources if it processed a specially
crafted file.
It was discovered that libxml2 would incorrectly perform entity
substitution even when requested not to. If a user or automated system were
tricked into opening a specially crafted document, an attacker could
possibly cause resource consumption, resulting in a denial of service.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Red Hat
libxml2: denial of service via recursive entity expansion
vendor_redhat·2014-10-16·CVSS 5.0
CVE-2014-3660 [MEDIUM] CWE-400 libxml2: denial of service via recursive entity expansion
libxml2: denial of service via recursive entity expansion
parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.
A denial of service flaw was found in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a specially crafted XML file that, when processed by an application using libxml2, would lead to excessive CPU consumption (denial of service) based on excessive entity substitutions, even if entity substitution was disabled, which is the parser defa
Debian
CVE-2014-3660: libxml2 - parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even...
vendor_debian·2014·CVSS 5.0
CVE-2014-3660 [MEDIUM] CVE-2014-3660: libxml2 - parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even...
parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.
Scope: local
bookworm: resolved (fixed in 2.9.2+dfsg1-1)
bullseye: resolved (fixed in 2.9.2+dfsg1-1)
forky: resolved (fixed in 2.9.2+dfsg1-1)
sid: resolved (fixed in 2.9.2+dfsg1-1)
trixie: resolved (fixed in 2.9.2+dfsg1-1)
Apple
CVE-2014-3660: iOS 8.4.1
vendor_apple·CVSS 5.0
CVE-2014-3660 [MEDIUM] CVE-2014-3660: iOS 8.4.1
Apple Security Update: About the security content of iOS 8.4.1
Product: iOS
Version: 8.4.1
CVE: CVE-2014-3660
Component: CVE-ID
Impact: A malicious application may be able to execute arbitrary code with system privileges
Description: A memory corruption issue existed in handling of malformed XPC messages. This issue was improved through improved bounds checking.
Apple
CVE-2014-3660: Apple TV 7.2.1
vendor_apple·CVSS 5.0
CVE-2014-3660 [MEDIUM] CVE-2014-3660: Apple TV 7.2.1
Apple Security Update: About the security content of Apple TV 7.2.1
Product: Apple TV
Version: 7.2.1
CVE: CVE-2014-3660
Component: CVE-ID
Impact: A malicious application may be able to execute arbitrary code with system privileges
Description: A memory corruption issue existed in handling of malformed XPC messages. This issue was improved through improved bounds checking.
Apple
CVE-2014-3660: OS X Yosemite v10.10.5 and Security Update 2015-006
vendor_apple·CVSS 5.0
CVE-2014-3660 [MEDIUM] CVE-2014-3660: OS X Yosemite v10.10.5 and Security Update 2015-006
Apple Security Update: About the security content of OS X Yosemite v10.10.5 and Security Update 2015-006
Product: OS X Yosemite v10.10.5 and Security Update 2015-006
CVE: CVE-2014-3660
Component: CVE-ID
Impact: Parsing a maliciously crafted XML document may lead to disclosure of user information
Description: A memory corruption issue existed in parsing of XML files. This issue was addressed through improved memory handling.
GHSA
GHSA-xrph-4qjj-gj25: parser
ghsa_unreviewed·2022-05-17
CVE-2014-3660 [MEDIUM] GHSA-xrph-4qjj-gj25: parser
parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.
OSV
Nokogiri subject to DoS via libxml2 vulnerability
osv·2018-08-21·CVSS 5.0
CVE-2015-5312 [MEDIUM] Nokogiri subject to DoS via libxml2 vulnerability
Nokogiri subject to DoS via libxml2 vulnerability
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 (as used in nokogiri before 1.6.7.1) does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
GHSA
Nokogiri subject to DoS via libxml2 vulnerability
ghsa·2018-08-21·CVSS 5.0
CVE-2015-5312 [MEDIUM] CWE-400 Nokogiri subject to DoS via libxml2 vulnerability
Nokogiri subject to DoS via libxml2 vulnerability
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 (as used in nokogiri before 1.6.7.1) does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
OSV
CVE-2015-5312: The xmlStringLenDecodeEntities function in parser
osv·2015-12-15·CVSS 5.0
CVE-2015-5312 [MEDIUM] CVE-2015-5312: The xmlStringLenDecodeEntities function in parser
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
OSV
CVE-2014-3660: parser
osv·2014-11-04·CVSS 5.0
CVE-2014-3660 [MEDIUM] CVE-2014-3660: parser
parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.
No detection rules found.
No public exploits indexed.
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlhttp://lists.opensuse.org/opensuse-updates/2014-10/msg00034.htmlhttp://lists.opensuse.org/opensuse-updates/2015-12/msg00120.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1655.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1885.htmlhttp://secunia.com/advisories/59903http://secunia.com/advisories/61965http://secunia.com/advisories/61966http://secunia.com/advisories/61991http://www.debian.org/security/2014/dsa-3057http://www.mandriva.com/security/advisories?name=MDVSA-2014:244http://www.openwall.com/lists/oss-security/2014/10/17/7http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlhttp://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlhttp://www.securityfocus.com/bid/70644http://www.ubuntu.com/usn/USN-2389-1https://bugzilla.redhat.com/attachment.cgi?id=944444&action=diffhttps://bugzilla.redhat.com/show_bug.cgi?id=1149084https://support.apple.com/kb/HT205030https://support.apple.com/kb/HT205031https://www.ncsc.nl/actueel/nieuwsberichten/kwetsbaarheid-ontdekt-in-libxml2.htmlhttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlhttp://lists.opensuse.org/opensuse-updates/2014-10/msg00034.htmlhttp://lists.opensuse.org/opensuse-updates/2015-12/msg00120.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1655.htmlhttp://rhn.redhat.com/errata/RHSA-2014-1885.htmlhttp://secunia.com/advisories/59903http://secunia.com/advisories/61965http://secunia.com/advisories/61966http://secunia.com/advisories/61991http://www.debian.org/security/2014/dsa-3057http://www.mandriva.com/security/advisories?name=MDVSA-2014:244http://www.openwall.com/lists/oss-security/2014/10/17/7http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlhttp://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlhttp://www.securityfocus.com/bid/70644http://www.ubuntu.com/usn/USN-2389-1https://bugzilla.redhat.com/attachment.cgi?id=944444&action=diffhttps://bugzilla.redhat.com/show_bug.cgi?id=1149084https://support.apple.com/kb/HT205030https://support.apple.com/kb/HT205031https://www.ncsc.nl/actueel/nieuwsberichten/kwetsbaarheid-ontdekt-in-libxml2.html
2014-11-04
Published