Bug 767387 (CVE-2011-3905)

Summary:	CVE-2011-3905 libxml2 out of bounds read
Product:	[Other] Security Response	Reporter:	Kurt Seifried <kseifried>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	c.david86, jrusnack, ohudlick, veillard
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	libxml2 2.8.0	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-09-18 20:19:05 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	755814, 771904, 771906, 771907, 771910, 771913, 772122, 820846, 833934, 891477, 891478
Bug Blocks:	767389, 771915, 891480

Description Kurt Seifried 2011-12-13 22:47:11 UTC

Reference: CONFIRM:http://code.google.com/p/chromium/issues/detail?id=95465 [Open URL]
Reference: CONFIRM:http://googlechromereleases.blogspot.com/2011/12/stable-channel-update.html [Open URL]

libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Comment 1 Huzaifa S. Sidhpurwala 2011-12-14 05:21:08 UTC

Chrome patch for libxml2:
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src/parser.c?r1=100883&r2=100882&pathrev=100883

Comment 2 Huzaifa S. Sidhpurwala 2011-12-14 05:57:46 UTC

This issue affects the version of libxml2 as shipped with Red Hat Enterprise Linux 4, 5 and 6.

This issue affects the version of libxml2 as shipped with Fedora release 15 and 16.

Comment 4 Daniel Veillard 2011-12-14 08:25:20 UTC

I just commited the latest patch upstream as this looks correct to me

http://git.gnome.org/browse/libxml2/commit/?id=77404b8b69bc122d12231807abf1a837d121b551

Daniel

Comment 6 Kurt Seifried 2011-12-14 17:26:41 UTC

This patch was also pointed out:

http://src.chromium.org/viewvc/chrome?view=rev&revision=100953

Comment 13 errata-xmlrpc 2012-01-11 17:50:02 UTC

This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2012:0017 https://rhn.redhat.com/errata/RHSA-2012-0017.html

Comment 14 errata-xmlrpc 2012-01-11 17:50:25 UTC

This issue has been addressed in following products:

  Red Hat Enterprise Linux 4

Via RHSA-2012:0016 https://rhn.redhat.com/errata/RHSA-2012-0016.html

Comment 15 errata-xmlrpc 2012-01-11 18:00:36 UTC

This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2012:0018 https://rhn.redhat.com/errata/RHSA-2012-0018.html

Comment 16 Vincent Danen 2012-01-11 19:11:21 UTC

Created libxml2 tracking bugs for this issue

Affects: fedora-all [bug 772122]

Comment 17 Huzaifa S. Sidhpurwala 2012-01-12 05:42:32 UTC

Created mingw32-libxml2 tracking bugs for this issue

Affects: fedora-all [bug 755814]

Comment 18 Huzaifa S. Sidhpurwala 2012-01-12 05:42:42 UTC

Statement:

This issue affects the version of libxml2 as shipped with Red Hat Enterprise
Linux 4, 5 and 6 and has been addressed via RHSA-2012:0016, RHSA-2012:0017 and
RHSA-2012:0018 respectively. This issue affects the version of mingw32-libxml2
as shipped with Red Hat Enterprise Linux 6. The Red Hat Security Response Team
has rated this issue as having low security impact. A future update may address
this issue in Red Hat Enterprise Linux 6.

Comment 21 errata-xmlrpc 2013-01-31 19:33:19 UTC

This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2013:0217 https://rhn.redhat.com/errata/RHSA-2013-0217.html