CVE-2008-3281

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

2.50% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 84.3% of scored records. A rank, not a probability.

NVD base score

6.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2008-08-27 20:00Z18 YR AGO

Last updated

2024-08-07 09:28Z2 YR AGO

Reserved

2008-07-24

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')Base

Data version

5.1

Document digest

8676f355703cb1f325f7ff0b8b3bb3115f5ecb37e86bd03aa35c71dd383acc47

• usn.ubuntu.comUSN-644-1https://usn.ubuntu.com/644-1/vendor-advisoryx_refsource_UBUNTU
• support.apple.comhttp://support.apple.com/kb/HT3639x_refsource_CONFIRM
• secunia.com31855http://secunia.com/advisories/31855third-party-advisoryx_refsource_SECUNIA
• www.securitytracker.com1020728http://www.securitytracker.com/id?1020728vdb-entryx_refsource_SECTRACK
• www.vupen.comADV-2009-1621http://www.vupen.com/english/advisories/2009/1621vdb-entryx_refsource_VUPEN
• www.redhat.comFEDORA-2008-7395https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00347.htmlvendor-advisoryx_refsource_FEDORA
• rhn.redhat.comRHSA-2008:0836https://rhn.redhat.com/errata/RHSA-2008-0836.htmlvendor-advisoryx_refsource_REDHAT
• secunia.com32807http://secunia.com/advisories/32807third-party-advisoryx_refsource_SECUNIA
• lists.apple.comAPPLE-SA-2009-06-08-1http://lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlvendor-advisoryx_refsource_APPLE
• secunia.com31982http://secunia.com/advisories/31982third-party-advisoryx_refsource_SECUNIA
• www.vupen.comADV-2008-2971http://www.vupen.com/english/advisories/2008/2971vdb-entryx_refsource_VUPEN
• www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2008-0017.htmlx_refsource_MISC
• www.vupen.comADV-2008-2843http://www.vupen.com/english/advisories/2008/2843vdb-entryx_refsource_VUPEN
• xmlsoft.orghttp://xmlsoft.org/news.htmlx_refsource_CONFIRM
• secunia.com31590http://secunia.com/advisories/31590third-party-advisoryx_refsource_SECUNIA
• www.vupen.comADV-2009-1522http://www.vupen.com/english/advisories/2009/1522vdb-entryx_refsource_VUPEN
• www.securityfocus.com20081031 VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiffhttp://www.securityfocus.com/archive/1/497962/100/0/threadedmailing-listx_refsource_BUGTRAQ
• www.ubuntu.comUSN-640-1http://www.ubuntu.com/usn/usn-640-1vendor-advisoryx_refsource_UBUNTU
• secunia.com31728http://secunia.com/advisories/31728third-party-advisoryx_refsource_SECUNIA
• security.gentoo.orgGLSA-200812-06http://security.gentoo.org/glsa/glsa-200812-06.xmlvendor-advisoryx_refsource_GENTOO
• lists.apple.comAPPLE-SA-2009-06-17-1http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.htmlvendor-advisoryx_refsource_APPLE
• secunia.com32488http://secunia.com/advisories/32488third-party-advisoryx_refsource_SECUNIA
• lists.opensuse.orgSUSE-SR:2008:018http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.htmlvendor-advisoryx_refsource_SUSE
• secunia.com31566http://secunia.com/advisories/31566third-party-advisoryx_refsource_SECUNIA
• www.securityfocus.com30783http://www.securityfocus.com/bid/30783vdb-entryx_refsource_BID
• wiki.rpath.comhttp://wiki.rpath.com/Advisories:rPSA-2008-0325x_refsource_CONFIRM
• oval.cisecurity.orgoval:org.mitre.oval:def:6496https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496vdb-entrysignaturex_refsource_OVAL
• www.vupen.comADV-2008-2419http://www.vupen.com/english/advisories/2008/2419vdb-entryx_refsource_VUPEN
• secunia.com35379http://secunia.com/advisories/35379third-party-advisoryx_refsource_SECUNIA
• www.mandriva.comMDVSA-2008:192http://www.mandriva.com/security/advisories?name=MDVSA-2008:192vendor-advisoryx_refsource_MANDRIVA
• secunia.com32974http://secunia.com/advisories/32974third-party-advisoryx_refsource_SECUNIA
• svn.gnome.orghttp://svn.gnome.org/viewvc/libxml2?view=revision&revision=3772x_refsource_CONFIRM
• www.redhat.comFEDORA-2008-7594https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00261.htmlvendor-advisoryx_refsource_FEDORA
• www.debian.orgDSA-1631http://www.debian.org/security/2008/dsa-1631vendor-advisoryx_refsource_DEBIAN
• bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=458086x_refsource_CONFIRM
• mail.gnome.org[xml] 20080820 Security fix for libxml2http://mail.gnome.org/archives/xml/2008-August/msg00034.htmlmailing-listx_refsource_MLIST
• oval.cisecurity.orgoval:org.mitre.oval:def:9812https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9812vdb-entrysignaturex_refsource_OVAL
• www.mandriva.comMDVSA-2008:180http://www.mandriva.com/security/advisories?name=MDVSA-2008:180vendor-advisoryx_refsource_MANDRIVA
• secunia.com31558http://secunia.com/advisories/31558third-party-advisoryx_refsource_SECUNIA
• support.apple.comhttp://support.apple.com/kb/HT3613x_refsource_CONFIRM
• lists.vmware.com[Security-announce] 20081030 VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiffhttp://lists.vmware.com/pipermail/security-announce/2008/000039.htmlmailing-listx_refsource_MLIST
• secunia.com31748http://secunia.com/advisories/31748third-party-advisoryx_refsource_SECUNIA