Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:DLA-355-1
HistoryNov 29, 2015 - 12:00 a.m.

libxml2 - security update

2015-11-2900:00:00
Google
osv.dev
16

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON
  • CVE-2015-8241
    Buffer overread with XML parser in xmlNextChar
  • CVE-2015-8317
    • issues in the xmlParseXMLDecl function:
      If we fail conversing the current input stream while
      processing the encoding declaration of the XMLDecl
      then it’s safer to just abort there and not try to
      report further errors.
    • If the string is not properly terminated do not try to convert
      to the given encoding.

Additional fix for off by one error in previous patch for CVE-2015-7942
(thanks to Salvatore for spotting this)

Related

openvas 23
nessus 38
debian 4
ibm 14
aix 1
prion 4
veracode 5
debiancve 3
ubuntucve 3
cve 4
oraclelinux 2
centos 2
osv 36
redhat 2
mageia 2
f5 2
amazon 2
cloudfoundry 1
ubuntu 2
rubygems 2
fedora 4
freebsd 1
suse 1
archlinux 1
apple 20
rosalinux 1
gentoo 1
tenable 1
openvas
openvas
Debian: Security Advisory (DLA-355-1)
2023-03-08 00:00:00
Oracle: Security Advisory (ELSA-2015-2549)
2015-12-08 00:00:00
Mageia: Security Advisory (MGASA-2015-0423)
2015-11-08 00:00:00
nessus
nessus
Debian DLA-355-1 : libxml2 security update
2015-11-30 00:00:00
AIX 7.2 TL 0 : libxml2 (IV80616)
2016-02-23 00:00:00
AIX 7.1 TL 4 : bos.rte.control (U868931)
2016-05-19 00:00:00
debian
debian
[SECURITY] [DLA 355-1] libxml2 security update
2015-11-29 22:45:43
[SECURITY] [DLA 334-1] libxml2 security update
2015-10-25 17:14:12
[SECURITY] [DSA 3430-1] libxml2 security update
2015-12-23 13:19:18
ibm
ibm
Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by OpenSource LibXML2 and LibXML Vulnerability (CVE-2015-7942 CVE-2015-8241 CVE-2015-8242)
2018-06-16 21:40:08
Security Bulletin: IBM Security Guardium is affected by the OpenSource libxml2 vulnerability
2018-06-16 21:40:07
Security Bulletin: Vulnerability in libxml2 affects IBM InfoSphere Streams. (CVE-2015-8317)
2018-06-16 13:40:35
aix
aix
Vulnerabilities in LibXML2 affect AIX,Vulnerabilities in LibXML2 affect VIOS
2016-02-22 08:06:13
prion
prion
Heap overflow
2015-12-15 21:59:00
Heap overflow
2015-12-15 21:59:00
Design/Logic Flaw
2016-07-22 02:59:00
veracode
veracode
Out-of-Bounds Read
2018-08-01 07:17:57
Denial Of Service (DoS)
2018-08-01 07:37:06
Information Disclosure
2019-05-02 05:51:46
debiancve
debiancve
CVE-2015-8317
2015-12-15 21:59:00
CVE-2015-8241
2015-12-15 21:59:00
CVE-2015-7942
2015-11-18 16:59:00
ubuntucve
ubuntucve
CVE-2015-8241
2015-11-18 00:00:00
CVE-2015-8317
2015-11-23 00:00:00
CVE-2015-7942
2015-10-23 00:00:00
cve
cve
CVE-2015-8317
2015-12-15 21:59:00
CVE-2015-8241
2015-12-15 21:59:00
CVE-2016-4619
2016-07-22 02:59:00
oraclelinux
oraclelinux
libxml2 security update
2015-12-07 00:00:00
libxml2 security update
2015-12-07 00:00:00
centos
centos
libxml2 security update
2015-12-07 13:26:33
libxml2 security update
2015-12-07 20:38:05
osv
osv
libxml2 - security update
2015-10-25 00:00:00
CVE-2016-9597
2018-07-30 14:29:02
CVE-2016-3709
2022-07-28 17:15:07
redhat
redhat
(RHSA-2015:2549) Moderate: libxml2 security update
2015-12-07 00:00:00
(RHSA-2015:2550) Moderate: libxml2 security update
2015-12-07 10:04:33
mageia
mageia
Updated libxml2 packages fix security vulnerabilities
2015-11-02 23:21:29
Updated libxml2 packages fix security vulnerabilities
2015-11-26 23:47:39
f5
f5
K61570943 : Multiple libXML2 vulnerabilities
2016-02-15 00:00:00
SOL61570943 - libXML2 vulnerabilities CVE-2015-7941 and CVE-2015-7942
2016-02-15 00:00:00
amazon
amazon
Medium: libxml2
2015-12-14 10:00:00
Medium: libxml2
2019-05-29 19:14:00
cloudfoundry
cloudfoundry
USN-2834-1 libxml2 vulnerability | Cloud Foundry
2016-01-07 00:00:00
ubuntu
ubuntu
libxml2 vulnerabilities
2015-12-14 00:00:00
libxml2 vulnerabilities
2015-11-16 00:00:00
rubygems
rubygems
Nokogiri gem contains several vulnerabilities in libxml2
2015-12-14 21:00:00
Nokogiri gem contains several vulnerabilities in libxml2 and libxslt
2015-04-13 21:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mingw-libxml2-2.9.3-1.fc22
2016-02-17 04:26:04
[SECURITY] Fedora 23 Update: mingw-libxml2-2.9.3-1.fc23
2016-02-17 04:02:04
[SECURITY] Fedora 22 Update: libxml2-2.9.3-1.fc22
2015-11-30 23:26:43
freebsd
freebsd
libxml2 -- multiple vulnerabilities
2015-11-20 00:00:00
suse
suse
Security update for sles12-docker-image (important)
2016-03-16 15:28:52
archlinux
archlinux
libxml2: multiple issues
2015-12-09 00:00:00
apple
apple
About the security content of iCloud for Windows 5.2.1 - Apple Support
2017-06-10 11:43:45
About the security content of iTunes 12.4.2 for Windows - Apple Support
2017-06-10 11:47:52
About the security content of iCloud for Windows 5.2.1
2016-07-18 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1905
2021-07-02 17:25:35
gentoo
gentoo
libxml2: Multiple vulnerabilities
2017-01-16 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON
Related for OSV:DLA-355-1
openvas23nessus38debian4ibm14aix1prion4veracode5debiancve3ubuntucve3cve4oraclelinux2centos2osv36redhat2mageia2f52amazon2cloudfoundry1ubuntu2rubygems2fedora4freebsd1suse1archlinux1apple20rosalinux1gentoo1tenable1