The vulnerability of the libxml2 library allows attackers to obtain confidential information, cause service failures, or exert other types of damage.

🗓️ 19 Jul 2016 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Libxml2 htmlParseComment buffer overflow can leak data or crash program due to unclosed comments.

Reporter	Title	Published	Views	Family All 71
IBM Security Bulletins	Security Bulletin: Vulnerability in libxml2 affects IBM Integrated Management Module (IMM) for System x & BladeCenter (CVE-2015-8710)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple liblxm2 vulnerabilities	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libxml2 affects IBM Flex System Networking Switch products (CVE-2015-8710)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Systems Tester is affected by Libxml2 vulnerability (CVE-2015-8710)	17 Jun 201805:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability libxml2 affects IBM System Networking RackSwitch products (CVE-2015-8710)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libxml2 affects IBM Virtual Fabric 10Gb Switch Module (CVE-2015-8710)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libxml2 affects IBM InfoSphere Streams. (CVE-2015-8710)	16 Jun 201813:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libxml2 affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems (CVE-2015-8710)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libpng and libxml affect Rational DOORS	1 May 202008:19	–	ibm
Tenable Nessus	Amazon Linux 2 : libxml2 (ALAS-2019-1220)	31 May 201900:00	–	nessus

Source	Link
openwall	www.openwall.com/lists/oss-security/2015/04/19/4
hackerone	www.hackerone.com/reports/57125
git	www.git.gnome.org/browse/libxml2/commit/
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
securityfocus	www.securityfocus.com/bid/79811
openwall	www.openwall.com/lists/oss-security/2015/12/31/7
openwall	www.openwall.com/lists/oss-security/2015/09/13/1
debian	www.debian.org/security/2015/dsa-3430
web	www.web.nvd.nist.gov/view/vuln/detail
debian	www.debian.org/security/dsa-3430/

23 Mar 2021 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 27.5

EPSS0.04711

libxml2 html parse comment buffer overflow data leak program crash unclosed comments