Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-7941HistoryNov 18, 2015 - 4:59 p.m.
CVE-2015-7941
2015-11-1816:59:00
Debian Security Bug Tracker
security-tracker.debian.org
10
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
58.3%
libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libxml2 | < 2.9.2+really2.9.1+dfsg1-0.1 | libxml2_2.9.2+really2.9.1+dfsg1-0.1_all.deb |
| Debian | 11 | all | libxml2 | < 2.9.2+really2.9.1+dfsg1-0.1 | libxml2_2.9.2+really2.9.1+dfsg1-0.1_all.deb |
| Debian | 10 | all | libxml2 | < 2.9.2+really2.9.1+dfsg1-0.1 | libxml2_2.9.2+really2.9.1+dfsg1-0.1_all.deb |
| Debian | 999 | all | libxml2 | < 2.9.2+really2.9.1+dfsg1-0.1 | libxml2_2.9.2+really2.9.1+dfsg1-0.1_all.deb |
| Debian | 13 | all | libxml2 | < 2.9.2+really2.9.1+dfsg1-0.1 | libxml2_2.9.2+really2.9.1+dfsg1-0.1_all.deb |
Related
prion
prion
Out-of-bounds
2015-11-18 16:59:00
Out-of-bounds
2015-11-18 16:59:00
ubuntucve
ubuntucve
CVE-2015-7941
2015-10-23 00:00:00
CVE-2015-7942
2015-10-23 00:00:00
cve
cve
CVE-2015-7941
2015-11-18 16:59:00
CVE-2015-7942
2015-11-18 16:59:00
f5
f5
SOL61570943 - libXML2 vulnerabilities CVE-2015-7941 and CVE-2015-7942
2016-02-15 00:00:00
K61570943 : Multiple libXML2 vulnerabilities
2016-02-15 00:00:00
debiancve
debiancve
CVE-2015-7942
2015-11-18 16:59:00
openvas
openvas
F5 BIG-IP - SOL61570943 - libXML2 vulnerabilities CVE-2015-7941 and CVE-2015-7942
2016-02-16 00:00:00
Fedora Update for mingw-libxml2 FEDORA-2016-189
2016-02-17 00:00:00
Ubuntu Update for libxml2 USN-2812-1
2015-11-17 00:00:00
nessus
nessus
AIX 7.2 TL 0 : libxml2 (IV80616)
2016-02-23 00:00:00
AIX 7.1 TL 4 : bos.rte.control (U868931)
2016-05-19 00:00:00
AIX 5.3 TL 12 : libxml2 (IV80617)
2016-02-23 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mingw-libxml2-2.9.3-1.fc22
2016-02-17 04:26:04
[SECURITY] Fedora 23 Update: mingw-libxml2-2.9.3-1.fc23
2016-02-17 04:02:04
[SECURITY] Fedora 22 Update: libxml2-2.9.3-1.fc22
2015-11-30 23:26:43
osv
osv
libxml2 - security update
2015-07-03 00:00:00
CVE-2016-9597
2018-07-30 14:29:02
CVE-2016-3709
2022-07-28 17:15:07
aix
aix
Vulnerabilities in LibXML2 affect AIX,Vulnerabilities in LibXML2 affect VIOS
2016-02-22 08:06:13
ubuntu
ubuntu
libxml2 vulnerabilities
2015-11-16 00:00:00
rubygems
rubygems
Nokogiri gem contains several vulnerabilities in libxml2 and libxslt
2015-04-13 21:00:00
ibm
ibm
redhat
redhat
(RHSA-2015:2549) Moderate: libxml2 security update
2015-12-07 00:00:00
(RHSA-2015:2550) Moderate: libxml2 security update
2015-12-07 10:04:33
archlinux
archlinux
libxml2: multiple issues
2015-12-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:51:46
Information Disclosure
2019-05-02 05:51:46
Denial Of Service (DoS)
2019-05-02 05:51:46
freebsd
freebsd
libxml2 -- multiple vulnerabilities
2015-11-20 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2015-12-07 00:00:00
libxml2 security update
2015-12-07 00:00:00
centos
centos
libxml2 security update
2015-12-07 13:26:33
libxml2 security update
2015-12-07 20:38:05
debian
debian
[SECURITY] [DSA 3430-1] libxml2 security update
2015-12-23 13:19:18
[SECURITY] [DSA 3430-1] libxml2 security update
2015-12-23 13:19:18
amazon
amazon
Medium: libxml2
2015-12-14 10:00:00
Medium: libxml2
2019-05-29 19:14:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2017-01-16 00:00:00
suse
suse
Security update for sles12-docker-image (important)
2016-03-16 15:28:52
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
58.3%
Related for DEBIANCVE:CVE-2015-7941