Lucene search
Veracode Vulnerability DatabaseVERACODE:7209HistoryAug 01, 2018 - 6:08 a.m.
Denial Of Service (DoS)
2018-08-0106:08:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.009
Percentile
82.7%
libxml2.so is vulnerable to denial of service (DoS) attacks. A malicious user can pass a HTML file to the htmlParseComment function in HTMLparser.c to cause a out-of-bounds heap memory acccess that can crash the application.
References
rhn.redhat.com/errata/RHSA-2016-1089.html
www.debian.org/security/2015/dsa-3430
www.openwall.com/lists/oss-security/2015/04/19/4
www.openwall.com/lists/oss-security/2015/09/13/1
www.openwall.com/lists/oss-security/2015/12/31/7
www.securityfocus.com/bid/79811
bugzilla.gnome.org/show_bug.cgi?id=746048
git.gnome.org/browse/libxml2/commit/?id=e724879d964d774df9b7969fc846605aa1bac54c
gitlab.gnome.org/GNOME/libxml2/commit/e724879d964d774df9b7969fc846605aa1bac54c
hackerone.com/reports/57125#activity-384861
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:0187-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:0178-1)
2021-04-19 00:00:00
Ubuntu: Security Advisory (USN-2875-1)
2016-01-20 00:00:00
debiancve
debiancve
CVE-2015-8710
2016-04-11 21:59:15
ibm
ibm
f5
f5
K45439210 : libxml2 vulnerability CVE-2015-8710
2017-07-20 00:00:00
prion
prion
Design/Logic Flaw
2016-04-11 21:59:00
ubuntucve
ubuntucve
CVE-2015-8710
2015-12-23 00:00:00
nessus
nessus
openSUSE Security Update : libxml2 (openSUSE-2016-68)
2016-01-25 00:00:00
SUSE SLED11 / SLES11 Security Update : libxml2 (SUSE-SU-2016:0187-1)
2016-01-22 00:00:00
F5 Networks BIG-IP : libxml2 vulnerability (K45439210)
2017-07-21 00:00:00
cvelist
cvelist
CVE-2015-8710
2016-04-11 21:00:00
cve
cve
CVE-2015-8710
2016-04-11 21:59:15
nvd
nvd
CVE-2015-8710
2016-04-11 21:59:15
ubuntu
ubuntu
libxml2 vulnerabilities
2016-01-19 00:00:00
osv
osv
libxml2 - security update
2015-07-03 00:00:00
mageia
mageia
Updated libxml2 packages fix security vulnerabilities
2015-11-26 23:47:39
centos
centos
libxml2 security update
2015-12-07 20:38:05
amazon
amazon
Medium: libxml2
2019-05-29 19:14:00
redhat
redhat
(RHSA-2015:2550) Moderate: libxml2 security update
2015-12-07 10:04:33
rosalinux
rosalinux
Advisory ROSA-SA-2021-1905
2021-07-02 17:25:35
suse
suse
Security update for sles12-docker-image (important)
2016-03-16 15:28:52
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47