Skip to content
OpenAdvisories
Unscored USN-2875-1 2 CVEs

libxml2 vulnerabilities

Published Jan 19, 2016 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libxml2 incorrectly handled certain malformed
documents. If a user or automated system were tricked into opening a
specially crafted document, an attacker could possibly cause libxml2 to
crash, resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS libxml2 2.9.1+dfsg1-3ubuntu4.7

Vulnerabilities 2

  • Medium —
    CVE-2015-7499

    Heap-based buffer overflow in nokogiri

    Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  • Unscored —
    CVE-2015-8710 Public exploit

    The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a deni…

    libxml2 libxml2 Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-7499
  • report
    https://ubuntu.com/security/CVE-2015-8710