CVE-2017-16932 Ubuntu Security Notification for Libxml2 Vulnerability (USN-3504-1)

2017年12月8日 875点热度 0人点赞 0条评论

漏洞类别：Ubuntu

漏洞等级：

漏洞信息

It was discovered that libxml2 incorrecty handled certain parameter entities.

漏洞危害

An attacker could use this issue with specially constructed XML data to cause libxml2 to consume resources, leading to a denial of service.

解决方案

Refer to Ubuntu advisory USN-3504-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

0daybank