CVE-2015-8035

🗓️ 18 Nov 2015 16:00:00Reported by mitreType

The xz_decomp function in libxml2 2.9.1 allows denial of service via crafted XML data

Reporter	Title	Published	Views	Family All 173
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple libxml2 vulnerabilities	27 Jul 202009:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities	9 Apr 202103:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libxml2 affects IBM Watson Studio Local	18 Dec 201918:01	–	ibm
IBM Security Bulletins	Security Bulletins - Cognos Analytics and Cognos Business Intelligence	19 Jul 201816:57	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSource libXML2 Vulnerabilities affect Identity Insight 8.1	16 Jun 201813:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libpng and libxml affect Rational DOORS	1 May 202008:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server 2016Q1 Security Updater : IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.	15 Jun 201823:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Libxml2 affect Rational Systems Tester	17 Jun 201805:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libxml2 affect IBM Cognos Metrics Manager (CVE-2015-1819, CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500, CVE-2015-7941, CVE-2015-7942, CVE-2015-8035, CVE-2015-8241, CVE-2015-8317)	15 Jun 201823:15	–	ibm
Tenable Nessus	Mac OS X 10.11.x < 10.11.4 Multiple Vulnerabilities	27 May 201600:00	–	nessus

NVD

Node

debian debian_linuxMatch7.0

debian debian_linuxMatch8.0

Node

xmlsoft libxml2Match2.9.1

Node

apple iphone_osRange≤9.2.1

apple mac_os_xRange≤10.11.3

apple tvosRange≤9.1

apple watchosRange≤2.1

Node

canonical ubuntu_linuxMatch14.04lts

Source	Link
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
lists	www.lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html
openwall	www.openwall.com/lists/oss-security/2015/11/03/1
debian	www.debian.org/security/2015/dsa-3430
lists	www.lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
securitytracker	www.securitytracker.com/id/1034243
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html
rhn	www.rhn.redhat.com/errata/RHSA-2016-1089.html

06 May 2026 22:30Current

6.6Medium risk

Vulners AI Score6.6

CVSS 22.6

EPSS0.01006

CWE-399