[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]

http://advisories.mageia.org/MGASA-2015-0199.html

http://cpansearch.perl.org/src/SHLOMIF/XML-LibXML-2.0119/Changes

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157448.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157740.html

http://lists.opensuse.org/opensuse-updates/2015-09/msg00006.html

http://www.debian.org/security/2015/dsa-3243

http://www.mandriva.com/security/advisories?name=MDVSA-2015:231

http://www.openwall.com/lists/oss-security/2015/04/25/2

http://www.openwall.com/lists/oss-security/2015/04/30/1

http://www.securityfocus.com/bid/74333

http://www.ubuntu.com/usn/USN-2592-1

https://bitbucket.org/shlomif/perl-xml-libxml/commits/5962fd067580767777e94640b129ae8930a68a30/raw/

NIST CWE-611

NIST NVD-CWE-Other

OR
     *cpe:2.3:a:xml-libxml_project:xml_libxml:*:*:*:*:*:*:*:* versions up to (including) 2.0118

OR
     *cpe:2.3:a:xml-libxml_project:xml-libxml:*:*:*:*:*:perl:*:* versions up to (including) 2.0118

http://www.openwall.com/lists/oss-security/2015/04/25/2 Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/04/25/2 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/04/30/1 Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/04/30/1 Mailing List, Third Party Advisory

<a href="http://cwe.mitre.org/data/definitions/611.html">CWE-611: Improper Restriction of XML External Entity Reference ('XXE')</a>

OR
     *cpe:2.3:o:opensuse_project:opensuse:13.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse_project:opensuse:13.2:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse_project:opensuse:13.1:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse_project:opensuse:13.2:*:*:*:*:*:*:*

http://advisories.mageia.org/MGASA-2015-0199.html No Types Assigned

http://advisories.mageia.org/MGASA-2015-0199.html Third Party Advisory

http://cpansearch.perl.org/src/SHLOMIF/XML-LibXML-2.0119/Changes No Types Assigned

http://cpansearch.perl.org/src/SHLOMIF/XML-LibXML-2.0119/Changes Release Notes, Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157448.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157448.html Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157740.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157740.html Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-09/msg00006.html No Types Assigned

http://lists.opensuse.org/opensuse-updates/2015-09/msg00006.html Third Party Advisory

http://www.debian.org/security/2015/dsa-3243 No Types Assigned

http://www.debian.org/security/2015/dsa-3243 Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2015:231 No Types Assigned

http://www.mandriva.com/security/advisories?name=MDVSA-2015:231 Broken Link

http://www.openwall.com/lists/oss-security/2015/04/25/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2015/04/25/2 Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/04/30/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2015/04/30/1 Third Party Advisory

http://www.securityfocus.com/bid/74333 No Types Assigned

http://www.securityfocus.com/bid/74333 Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-2592-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2592-1 Third Party Advisory

http://advisories.mageia.org/MGASA-2015-0199.html [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157448.html [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157740.html [No Types Assigned]

http://www.mandriva.com/security/advisories?name=MDVSA-2015:231 [No Types Assigned]

http://lists.opensuse.org/opensuse-updates/2015-09/msg00006.html [No Types Assigned]

http://www.securityfocus.com/bid/74333 [No Types Assigned]

Configuration 1
     OR
          *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
          *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
          *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:xml-libxml_project:xml_libxml:2.0118:*:*:*:*:*:*:* (and previous)

Configuration 1
     OR
          *cpe:2.3:a:xml-libxml_project:xml_libxml:2.0118:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
          *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
          *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

La función _clone en XML::LibXML en versiones anteriores a 2.0119 no establece correctamente la opción expand_entities, lo que permite a atacantes remotos llevar a cabo ataques de entidad externa XML (XXE) a través de datos XML manipulados a la función (1) new o (2) load_xml.

La fución _clone en XML::LibXML en versiones anteriores a 2.0119 no configura correctamente la función expand_entities, lo que permite a atacantes remotos llevar a cabo ataques de entidad externa XML (XXE) a través de datos XML manipulados a la función (1) new o (2) load_xml.

La fución _clone en XML::LibXML en versiones anteriores a 2.0119 no configura correctamente la función expand_entities, lo que permite a atacantes remotos llevar a cabo ataques de entidad externa XML (XXE) a través de datos XML manipulados a la función (1) new o (2) load_xml.

La función _clone en XML::LibXML anterior a 2.0119 no configura correctamente la opción expand_entities, lo que permite atacantes remotos realizar ataques de entidad externa XML (XXE) a través de datos XML manipulados en la función (1) new o (2) load_xml.

The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML data to the (1) new or (2) load_xml function.

The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

NVD-CWE-Other

Configuration 1
     OR
          *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
          *cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
          *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
          *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:xml-libxml_project:xml_libxml:2.0118:*:*:*:*:*:*:* (and previous)

https://bitbucket.org/shlomif/perl-xml-libxml/commits/5962fd067580767777e94640b129ae8930a68a30/raw/ No Types Assigned

https://bitbucket.org/shlomif/perl-xml-libxml/commits/5962fd067580767777e94640b129ae8930a68a30/raw/ Advisory

<a href="http://cwe.mitre.org/data/definitions/611.html">CWE-611: Improper Restriction of XML External Entity Reference ('XXE')</a>