首页    新闻    下载    文档    论坛     最新漏洞    黑客教程    数据库    搜索    小榕软件实验室怀旧版    星际争霸WEB版    最新IP准确查询   
名称: 密码:      忘记密码  马上注册
漏洞公告 :: 最新漏洞公告

libxml2 xmlSAX2Characters()函数整数溢出漏洞


http://www.gipsky.com/
libxml2 xmlSAX2Characters()函数整数溢出漏洞

发布日期:2008-11-17

更新日期:2008-11-18



受影响系统:



XMLSoft Libxml2 2.7.2



描述:BUGTRAQ ID: 32326

CVE(CAN) ID: CVE-2008-4226



libxml软件包提供允许用户操控XML文件的函数库,包含有读、修改和写XML和HTML文件支持。







libxml2库的xmlSAX2Characters()函数中存在整数溢出漏洞,如果用户受骗使用链接到该库的应用程序打开了超大的XML文件的话,就可以触发这个溢出,导致执行任意指令。



<*来源:Drew Yao



链接:https://bugzilla.redhat.com/show_bug.c ... =multiple%26amp;id=470466

http://secunia.com/advisories/32773/

http://www.debian.org/security/2008/dsa-1666

https://www.redhat.com/support/errata/RHSA-2008-0988.html

*>



建议:厂商补丁:



Debian

------

Debian已经为此发布了一个安全公告(DSA-1666-1)以及相应补丁:



DSA-1666-1:New libxml2 packages fix several vulnerabilities



链接:http://www.debian.org/security/2008/dsa-1666







补丁下载:







Source archives:







http://security.debian.org/pool/updat ... libxml2_2.6.27.dfsg-6.dsc



Size/MD5 checksum: 893 b6b2006ffadfb999e72974d574814b7c



http://security.debian.org/pool/updat ... 2_2.6.27.dfsg.orig.tar.gz



Size/MD5 checksum: 3416175 5ff71b22f6253a6dd9afc1c34778dec3



http://security.debian.org/pool/updat ... ml2_2.6.27.dfsg-6.diff.gz



Size/MD5 checksum: 147867 d6a3bbbe39bffe96867de82b11c7c5be







Architecture independent packages:







http://security.debian.org/pool/updat ... doc_2.6.27.dfsg-6_all.deb



Size/MD5 checksum: 1328280 c2990030601040775b909c8ace076100







alpha architecture (DEC Alpha)







http://security.debian.org/pool/updat ... g_2.6.27.dfsg-6_alpha.deb



Size/MD5 checksum: 881946 38629543e71a18f6007b8d61d0500e36



http://security.debian.org/pool/updat ... 2_2.6.27.dfsg-6_alpha.deb



Size/MD5 checksum: 821150 f14ee677bb7eac20cd65adef90af0f3c



http://security.debian.org/pool/updat ... s_2.6.27.dfsg-6_alpha.deb



Size/MD5 checksum: 37972 d7757b07f8b0c69f9fd0a07a1598a3e3



http://security.debian.org/pool/updat ... 2_2.6.27.dfsg-6_alpha.deb



Size/MD5 checksum: 184750 020e5ca7663ee88695e1502c8e8af77c



http://security.debian.org/pool/updat ... v_2.6.27.dfsg-6_alpha.deb



Size/MD5 checksum: 917020 f837c687d428d94559bf68e012bc0e02







amd64 architecture (AMD x86_64 (AMD64))







http://security.debian.org/pool/updat ... v_2.6.27.dfsg-6_amd64.deb



Size/MD5 checksum: 745790 94edf60cc7d02dd31a70376baf740958



http://security.debian.org/pool/updat ... g_2.6.27.dfsg-6_amd64.deb



Size/MD5 checksum: 892010 a648a6d69a73593739035d78ed3c8436



http://security.debian.org/pool/updat ... 2_2.6.27.dfsg-6_amd64.deb



Size/MD5 checksum: 796410 9f38a5028c33f32cf1701535c1c37984



http://security.debian.org/pool/updat ... s_2.6.27.dfsg-6_amd64.deb



Size/MD5 checksum: 36682 4de1bfa28b9361e462075451befbe66c



http://security.debian.org/pool/updat ... 2_2.6.27.dfsg-6_amd64.deb



Size/MD5 checksum: 184126 1aae3163d718d0c378203b7ea1a53a9b







arm architecture (ARM)







http://security.debian.org/pool/updat ... dev_2.6.27.dfsg-6_arm.deb



Size/MD5 checksum: 673236 cda6995615db6e74610d8a51607e85e4



http://security.debian.org/pool/updat ... dbg_2.6.27.dfsg-6_arm.deb



Size/MD5 checksum: 817602 c5f81e370d055ba14a40a64d3fbb6e9e



http://security.debian.org/pool/updat ... ils_2.6.27.dfsg-6_arm.deb



Size/MD5 checksum: 34682 4b01403ce80c2949f31559e0eacc044b



http://security.debian.org/pool/updat ... ml2_2.6.27.dfsg-6_arm.deb



Size/MD5 checksum: 165284 f84251cc53fa6b67b7fb55f58dd47d5b



http://security.debian.org/pool/updat ... ml2_2.6.27.dfsg-6_arm.deb



Size/MD5 checksum: 742176 2e9e6cbbc777d49a99d8a6d98c5dc799







hppa architecture (HP PA RISC)







http://security.debian.org/pool/updat ... ev_2.6.27.dfsg-6_hppa.deb



Size/MD5 checksum: 858220 0f8cf389ab60a7639fac0f6499325995



http://security.debian.org/pool/updat ... bg_2.6.27.dfsg-6_hppa.deb



Size/MD5 checksum: 863998 2332655d5ec188cf038cf9fcab862d9f



http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_hppa.deb



Size/MD5 checksum: 850370 6c600a26f96c3a3eea898821b0a63937



http://security.debian.org/pool/updat ... ls_2.6.27.dfsg-6_hppa.deb



Size/MD5 checksum: 36852 75d6a8790e01eacb3183e6f295542215



http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_hppa.deb



Size/MD5 checksum: 192850 f635c62c33d9a2ea17015b08370dfd8f







i386 architecture (Intel ia32)







http://security.debian.org/pool/updat ... bg_2.6.27.dfsg-6_i386.deb



Size/MD5 checksum: 857246 6cebb1b5f8e5e87c00319eb59df9c497



http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_i386.deb



Size/MD5 checksum: 169026 31acf12efa0a8f37045f3f0869b894f8



http://security.debian.org/pool/updat ... ev_2.6.27.dfsg-6_i386.deb



Size/MD5 checksum: 681544 f0f383f2ea6ae309bfbcd13f2a2e8efa



http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_i386.deb



Size/MD5 checksum: 756128 f776e4a0c28389602bb6b26965fc70ce



http://security.debian.org/pool/updat ... ls_2.6.27.dfsg-6_i386.deb



Size/MD5 checksum: 34496 0cf1427860bb36162af23351285ff091







ia64 architecture (Intel ia64)







http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_ia64.deb



Size/MD5 checksum: 196528 3eaa55301a20961852f3a3c5b64bde8c



http://security.debian.org/pool/updat ... ls_2.6.27.dfsg-6_ia64.deb



Size/MD5 checksum: 48494 280c616ff34b4aa41a48173828b6e66c



http://security.debian.org/pool/updat ... ev_2.6.27.dfsg-6_ia64.deb



Size/MD5 checksum: 1106616 e7b32b8f711337ca52a041af581a05b6



http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_ia64.deb



Size/MD5 checksum: 1080448 a7334ed64dba73272b2001e09d18493f



http://security.debian.org/pool/updat ... bg_2.6.27.dfsg-6_ia64.deb



Size/MD5 checksum: 874194 1410e29414572197b6f82dd5a8be061f







mips architecture (MIPS (Big Endian))







http://security.debian.org/pool/updat ... ev_2.6.27.dfsg-6_mips.deb



Size/MD5 checksum: 840690 ad2ce083ff5c14656ea3ae28b0fa783d



http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_mips.deb



Size/MD5 checksum: 770540 d1faeaa723c3de301fb4c8a44ece376a



http://security.debian.org/pool/updat ... ls_2.6.27.dfsg-6_mips.deb



Size/MD5 checksum: 34424 c7c9469462957365ab26e7f06e1f0521



http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_mips.deb



Size/MD5 checksum: 171674 5e6f7cbe84d053bd19dda54346330f75



http://security.debian.org/pool/updat ... bg_2.6.27.dfsg-6_mips.deb



Size/MD5 checksum: 926930 c4a3402711ebb05f38b1146eebcd0a71







mipsel architecture (MIPS (Little Endian))







http://security.debian.org/pool/updat ... _2.6.27.dfsg-6_mipsel.deb



Size/MD5 checksum: 34396 79f5ff849d9a0ed01ab567ec542b7f3e



http://security.debian.org/pool/updat ... _2.6.27.dfsg-6_mipsel.deb



Size/MD5 checksum: 898480 c195cceafe5efce1de168475a462be54



http://security.debian.org/pool/updat ... _2.6.27.dfsg-6_mipsel.deb



Size/MD5 checksum: 769244 d0d36bff7e63adf76857166c3ed10daa



http://security.debian.org/pool/updat ... _2.6.27.dfsg-6_mipsel.deb



Size/MD5 checksum: 168696 3667deae6585a788c4da731b4fc9383d



http://security.debian.org/pool/updat ... _2.6.27.dfsg-6_mipsel.deb



Size/MD5 checksum: 833258 4b1612f79d4b9d1ce2d7086fbb8edbd0







powerpc architecture (PowerPC)







http://security.debian.org/pool/updat ... 2.6.27.dfsg-6_powerpc.deb



Size/MD5 checksum: 780124 0d2ed3ecc5a1e7a5ce3870fab1bcfc43



http://security.debian.org/pool/updat ... 2.6.27.dfsg-6_powerpc.deb



Size/MD5 checksum: 172736 2011f174234c5e939cebeedc2fd9e707



http://security.debian.org/pool/updat ... 2.6.27.dfsg-6_powerpc.deb



Size/MD5 checksum: 37662 94991d67033b1b921bb72e5d7bf2b844



http://security.debian.org/pool/updat ... 2.6.27.dfsg-6_powerpc.deb



Size/MD5 checksum: 898080 321d90790cf68bc046b9b577e7986438



http://security.debian.org/pool/updat ... 2.6.27.dfsg-6_powerpc.deb



Size/MD5 checksum: 771124 47b6d53839ea42f54ae6ad2b89594a26







s390 architecture (IBM S/390)







http://security.debian.org/pool/updat ... ls_2.6.27.dfsg-6_s390.deb



Size/MD5 checksum: 36368 fbc5505f4471c4c2fe6ad41903c5596f



http://security.debian.org/pool/updat ... bg_2.6.27.dfsg-6_s390.deb



Size/MD5 checksum: 885484 ead63bcf342e568c9c338c2772ea4e0d



http://security.debian.org/pool/updat ... ev_2.6.27.dfsg-6_s390.deb



Size/MD5 checksum: 750248 ed7465c981212e90fac94dc040ac6bb4



http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_s390.deb



Size/MD5 checksum: 185718 414512cb0af24a7c5e3622b75ef9b56f



http://security.debian.org/pool/updat ... l2_2.6.27.dfsg-6_s390.deb



Size/MD5 checksum: 806342 0f85b6120fdba835eaf39d02b4a606d9







sparc architecture (Sun SPARC/UltraSPARC)







http://security.debian.org/pool/updat ... s_2.6.27.dfsg-6_sparc.deb



Size/MD5 checksum: 34578 dd02c5498d378ee75330f8f93b2eb3a7



http://security.debian.org/pool/updat ... g_2.6.27.dfsg-6_sparc.deb



Size/MD5 checksum: 781490 ecf288ea66fc19e8f9874b90884a888e



http://security.debian.org/pool/updat ... v_2.6.27.dfsg-6_sparc.deb



Size/MD5 checksum: 713214 434a8a91f3a4acbfc3df2a2707acbbe0



http://security.debian.org/pool/updat ... 2_2.6.27.dfsg-6_sparc.deb



Size/MD5 checksum: 759786 83ba89269fd32296c48c8498e100372b



http://security.debian.org/pool/updat ... 2_2.6.27.dfsg-6_sparc.deb



Size/MD5 checksum: 176878 9840698d19580fe86bfc55a2347361e5







补丁安装方法:







1. 手工安装补丁包:







首先,使用下面的命令来下载补丁软件:



# wget url (url是补丁下载链接地址)







然后,使用下面的命令来安装补丁:



# dpkg -i file.deb (file是相应的补丁名)







2. 使用apt-get自动安装补丁包:







首先,使用下面的命令更新内部数据库:



# apt-get update







然后,使用下面的命令安装更新软件包:



# apt-get upgrade



RedHat

------

RedHat已经为此发布了一个安全公告(RHSA-2008:0988-01)以及相应补丁:



RHSA-2008:0988-01:Important: libxml2 security update



链接:https://www.redhat.com/support/errata/RHSA-2008-0988.html
<< Exodus im:// URI处理器命令行参数注入漏洞 libxml2 xmlBufferResize()函数远程拒绝服务漏洞 >>
评分
10987654321
API:
gipsky.com & 安信网络

系统导航

 

Copyright © 2001-2010 安信网络. All Rights Reserved
京ICP备05056747号