DebianDEBIAN:DLA-373-1:B7349[SECURITY] [DLA 373-1] libxml2 security update
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
64.3%
Package : libxml2
Version : 2.7.8.dfsg-2+squeeze16
CVE ID : CVE-2015-5312 CVE-2015-7497 CVE-2015-7498 CVE-2015-7499
CVE-2015-7500
Several vulnerabilities were discovered in libxml2, a library providing
support to read, modify and write XML and HTML files. A remote attacker
could provide a specially crafted XML or HTML file that, when processed
by an application using libxml2, would cause that application to use an
excessive amount of CPU, leak potentially sensitive information, or
crash the application.
CVE-2015-5312: CPU exhaustion when processing specially crafted XML input.
CVE-2015-7497: Heap-based buffer overflow in xmlDictComputeFastQKey.
CVE-2015-7498: Heap-based buffer overflow in xmlParseXmlDecl.
CVE-2015-7499: Heap-based buffer overflow in xmlGROW.
CVE-2015-7500: Heap buffer overflow in xmlParseMisc.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 7 | mipsel | libxml2 | < 2.8.0+dfsg1-7+wheezy5 | libxml2_2.8.0+dfsg1-7+wheezy5_mipsel.deb |
| Debian | 7 | i386 | libxml2-dbg | < 2.8.0+dfsg1-7+wheezy5 | libxml2-dbg_2.8.0+dfsg1-7+wheezy5_i386.deb |
| Debian | 6 | i386 | libxml2-utils | < 2.7.8.dfsg-2+squeeze16 | libxml2-utils_2.7.8.dfsg-2+squeeze16_i386.deb |
| Debian | 8 | arm64 | libxml2-utils | < 2.9.1+dfsg1-5+deb8u1 | libxml2-utils_2.9.1+dfsg1-5+deb8u1_arm64.deb |
| Debian | 8 | ppc64el | python-libxml2-dbg | < 2.9.1+dfsg1-5+deb8u1 | python-libxml2-dbg_2.9.1+dfsg1-5+deb8u1_ppc64el.deb |
| Debian | 7 | mips | python-libxml2-dbg | < 2.8.0+dfsg1-7+wheezy5 | python-libxml2-dbg_2.8.0+dfsg1-7+wheezy5_mips.deb |
| Debian | 8 | arm64 | python-libxml2 | < 2.9.1+dfsg1-5+deb8u1 | python-libxml2_2.9.1+dfsg1-5+deb8u1_arm64.deb |
| Debian | 8 | armel | python-libxml2 | < 2.9.1+dfsg1-5+deb8u1 | python-libxml2_2.9.1+dfsg1-5+deb8u1_armel.deb |
| Debian | 8 | arm64 | libxml2-dbg | < 2.9.1+dfsg1-5+deb8u1 | libxml2-dbg_2.9.1+dfsg1-5+deb8u1_arm64.deb |
| Debian | 8 | armhf | libxml2-dbg | < 2.9.1+dfsg1-5+deb8u1 | libxml2-dbg_2.9.1+dfsg1-5+deb8u1_armhf.deb |
Related
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
64.3%