DeutschShown in its original language — a full translation is planned for a future version.
libxml2: Mehrere Schwachstellen
view advisory published 2015-11-22
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libxml2 ausnutzen, um beliebigen Code zur Ausführung zu bringen, Einblick in vertrauliche Daten zu erhalten oder einen Denial of Service Angriff durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-8317US | medium5.0 | — | ||
The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) in… | ||||
| CVE-2015-7500US | medium5.0 | — | ||
The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors rela… | ||||
| CVE-2015-7499US | medium5.0 | — | ||
Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspeci… | ||||
| CVE-2015-7498US | medium5.0 | — | ||
Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vecto… | ||||
| CVE-2015-7497US | medium5.0 | — | ||
Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified… | ||||
| CVE-2015-5312US | high7.1 | — | ||
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial o… | ||||
02
references
External citations — patches, advisories, analysis.
- Meldung auf der OSS-Security Mailingliste vom 2015-11-21external
- Meldung auf der OSS-Security Mailingliste vom 2015-11-21external
- Red Hat Security Advisory RHSA-2015:2549-1 vom 2015-12-07external
- Red Hat Security Advisory RHSA-2015:2550-1 vom 2015-12-07external
- Red Hat Security Advisory RHSA-2016:1089-1 vom 2016-05-17external
- Ubuntu Security Notice USN-2834-1 vom 2015-12-14external
- Ubuntu Security Notice USN-2875-1 vom 2016-01-20external
- xmlsoft.org Release Notes v2.9.3 vom 2015-11-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan