Test ID:	1.3.6.1.4.1.25623.1.1.2.2017.1069
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2017-1069)
Summary:	The remote host is missing an update for the Huawei EulerOS 'libxml2' package(s) announced via the EulerOS-SA-2017-1069 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'libxml2' package(s) announced via the EulerOS-SA-2017-1069 advisory. Vulnerability Insight: libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document.(CVE-2016-9318) Affected Software/OS: 'libxml2' package(s) on Huawei EulerOS V2.0SP1. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9318 BugTraq ID: 94347 http://www.securityfocus.com/bid/94347 https://security.gentoo.org/glsa/201711-01 https://bugzilla.gnome.org/show_bug.cgi?id=772726 https://github.com/lsh123/xmlsec/issues/43 https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html https://usn.ubuntu.com/3739-1/ https://usn.ubuntu.com/3739-2/
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.