Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-7942HistoryNov 18, 2015 - 4:59 p.m.
CVE-2015-7942
2015-11-1816:59:00
Debian Security Bug Tracker
security-tracker.debian.org
13
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.6%
The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libxml2 | < 2.9.3+dfsg1-1 | libxml2_2.9.3+dfsg1-1_all.deb |
| Debian | 11 | all | libxml2 | < 2.9.3+dfsg1-1 | libxml2_2.9.3+dfsg1-1_all.deb |
| Debian | 10 | all | libxml2 | < 2.9.3+dfsg1-1 | libxml2_2.9.3+dfsg1-1_all.deb |
| Debian | 999 | all | libxml2 | < 2.9.3+dfsg1-1 | libxml2_2.9.3+dfsg1-1_all.deb |
| Debian | 13 | all | libxml2 | < 2.9.3+dfsg1-1 | libxml2_2.9.3+dfsg1-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2015-7942
2015-10-23 00:00:00
CVE-2015-7941
2015-10-23 00:00:00
prion
prion
Out-of-bounds
2015-11-18 16:59:00
Out-of-bounds
2015-11-18 16:59:00
f5
f5
SOL61570943 - libXML2 vulnerabilities CVE-2015-7941 and CVE-2015-7942
2016-02-15 00:00:00
K61570943 : Multiple libXML2 vulnerabilities
2016-02-15 00:00:00
cve
cve
CVE-2015-7942
2015-11-18 16:59:00
CVE-2015-7941
2015-11-18 16:59:00
openvas
openvas
F5 BIG-IP - SOL61570943 - libXML2 vulnerabilities CVE-2015-7941 and CVE-2015-7942
2016-02-16 00:00:00
Fedora Update for mingw-libxml2 FEDORA-2016-189
2016-02-17 00:00:00
Ubuntu Update for libxml2 USN-2812-1
2015-11-17 00:00:00
nessus
nessus
AIX 7.2 TL 0 : libxml2 (IV80616)
2016-02-23 00:00:00
AIX 6.1 TL 9 : bos.rte.control (U866671)
2016-05-19 00:00:00
AIX 7.1 TL 4 : bos.rte.control (U868931)
2016-05-19 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mingw-libxml2-2.9.3-1.fc22
2016-02-17 04:26:04
[SECURITY] Fedora 23 Update: mingw-libxml2-2.9.3-1.fc23
2016-02-17 04:02:04
[SECURITY] Fedora 22 Update: libxml2-2.9.3-1.fc22
2015-11-30 23:26:43
aix
aix
Vulnerabilities in LibXML2 affect AIX,Vulnerabilities in LibXML2 affect VIOS
2016-02-22 08:06:13
ubuntu
ubuntu
libxml2 vulnerabilities
2015-11-16 00:00:00
debiancve
debiancve
CVE-2015-7941
2015-11-18 16:59:00
osv
osv
libxml2 - security update
2015-10-25 00:00:00
libxml2 - security update
2015-07-03 00:00:00
libxml2 - security update
2015-11-29 00:00:00
debian
debian
[SECURITY] [DLA 334-1] libxml2 security update
2015-10-25 17:14:12
[SECURITY] [DLA 355-1] libxml2 security update
2015-11-29 22:45:43
[SECURITY] [DSA 3430-1] libxml2 security update
2015-12-23 13:19:18
mageia
mageia
Updated libxml2 packages fix security vulnerabilities
2015-11-02 23:21:29
rubygems
rubygems
Nokogiri gem contains several vulnerabilities in libxml2 and libxslt
2015-04-13 21:00:00
ibm
ibm
archlinux
archlinux
libxml2: multiple issues
2015-12-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:51:46
Information Disclosure
2019-05-02 05:51:46
Denial Of Service (DoS)
2019-05-02 05:51:46
freebsd
freebsd
libxml2 -- multiple vulnerabilities
2015-11-20 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2015-12-07 00:00:00
libxml2 security update
2015-12-07 00:00:00
centos
centos
libxml2 security update
2015-12-07 13:26:33
libxml2 security update
2015-12-07 20:38:05
redhat
redhat
(RHSA-2015:2549) Moderate: libxml2 security update
2015-12-07 00:00:00
(RHSA-2015:2550) Moderate: libxml2 security update
2015-12-07 10:04:33
amazon
amazon
Medium: libxml2
2015-12-14 10:00:00
Medium: libxml2
2019-05-29 19:14:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2017-01-16 00:00:00
suse
suse
Security update for sles12-docker-image (important)
2016-03-16 15:28:52
apple
apple
About the security content of tvOS 9.2
2016-03-21 00:00:00
About the security content of tvOS 9.2 - Apple Support
2017-01-23 03:54:34
About the security content of watchOS 2.2 - Apple Support
2017-01-23 03:54:34
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.6%
Related for DEBIANCVE:CVE-2015-7942