Skip to content
OpenAdvisories
Unscored DLA-266-1 3 CVEs

libxml2 - security update

Published Jul 3, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 libxml2 2.7.8.dfsg-2+squeeze12

Vulnerabilities 3

  • Medium —
    CVE-2015-1819

    Nokogiri vulnerable to libxml XML Entity Expansion

    The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  • Unscored —
    CVE-2015-7941

    libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial …

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-8710 Public exploit

    The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a deni…

    libxml2 libxml2 Debian Ubuntu