Huawei EulerOS: CVE-2015-10082: libplist security update

Huawei EulerOS: CVE-2015-10082: libplist security update

Severity

10

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

02/21/2023

Created

02/13/2024

Added

02/12/2024

Modified

01/28/2025

Description

A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221499.

Solution(s)

• huawei-euleros-2_0_sp5-upgrade-libplist

References

• https://attackerkb.com/topics/cve-2015-10082
• CVE - 2015-10082
• EulerOS-SA-2024-1147