libxml2: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2015-8241

  The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers t…

  libxml2 libxml2 Debian Ubuntu
  Dec 15, 2015
• Unscored —
  CVE-2015-8242

  The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-…

  libxml2 libxml2 Debian Ubuntu
  Dec 15, 2015

Revision history

1. 2025-06-30 #19

   Neue Updates von Dell aufgenommen

2. 2025-03-20 #18

   Neue Updates von Oracle Linux aufgenommen

3. 2024-12-03 #17

   Neue Updates von Dell aufgenommen

4. 2024-11-10 #16

   Neue Updates von Dell aufgenommen

5. 2017-02-02 #15

   New remediations available

6. 2016-07-03 #13

   New remediations available

7. 2016-07-03 #14

   Version nicht vorhanden

8. 2016-05-19 #11

   New remediations available

9. 2016-05-19 #12

   Version nicht vorhanden

10. 2016-01-11 #9

    New remediations available

11. 2016-01-11 #10

    Version nicht vorhanden

12. 2015-12-23 #7

    New remediations available

13. 2015-12-23 #8

    Version nicht vorhanden

14. 2015-12-09 #5

    New remediations available

15. 2015-12-09 #6

    Version nicht vorhanden

16. 2015-12-07 #4

    New remediations available

17. 2015-11-22 #3

    New remediations available

18. 2015-11-18 #1

    Initial Release

19. 2015-11-18 #2

    Version nicht vorhanden

References

• oss-security Blog: Buffer overflow in libxml2 vom 2015-11-18
  http://marc.info/?l=oss-security&m=144786427128894&w=2
• GNOME Bugzilla - Bug Liste #756263
  https://bugzilla.gnome.org/show_bug.cgi?id=756263
• GNOME Bugzilla - Bug Liste #756372
  https://bugzilla.gnome.org/show_bug.cgi?id=756372
• xmlsoft.org Release Notes v2.9.3 vom 2015-11-22
  http://www.xmlsoft.org/news.html
• Red Hat Security Advisory RHSA-2015:2550-1 vom 2015-12-07
  http://rhn.redhat.com/errata/RHSA-2015-2550.html
• Red Hat Security Advisory RHSA-2015:2549-1 vom 2015-12-07
  http://rhn.redhat.com/errata/RHSA-2015-2549.html
• CentOS-announce CESA-2015:2549 vom 2015-12-09
  https://lists.centos.org/pipermail/centos-announce/2015-December/021516.html
• Debian Security Advisory DSA-3430 vom 2015-12-24
  https://www.debian.org/security/2015/dsa-3430
• SUSE Security Update SUSE-SU-2016:0030-1 vom 2016-01-12
  https://www.suse.com/support/update/announcement/2016/suse-su-20160030-1.html
• SUSE Security Update SUSE-SU-2016:0049-1 vom 2016-01-12
  https://www.suse.com/support/update/announcement/2016/suse-su-20160049-1.html
• Red Hat Security Advisory RHSA-2016:1089-1 vom 2016-05-17
  http://rhn.redhat.com/errata/RHSA-2016-1089.html
• Xerox Mini Bulletin XRX16Q vom 2016-06-30
  https://www.xerox.com/download/security/security-bulletin/36b94-5368284530883/cert_Mini_Security_Bulletin_XRX16Q_for_ConnectKey_R16-05_v1-0.pdf
• Tenable Advisory ID: TNS-2017-03
  https://www.tenable.com/security/tns-2017-03
• Dell Security Advisory DSA-2024-251 vom 2024-11-11
  https://www.dell.com/support/kbdoc/de-de/000247018/dsa-2024-251-security-update-for-dell-networker-for-libxml2-2-9-0-vulnerabilities
• Dell Security Advisory DSA-2024-451 vom 2024-12-03
  https://www.dell.com/support/kbdoc/de-de/000255975/dsa-2024-451-security-update-for-dell-networker-for-libxml2-2-9-0-vulnerabilities
• Oracle Linux Security Advisory ELSA-2025-2673 vom 2025-03-21
  https://linux.oracle.com/errata/ELSA-2025-2673.html
• Dell Security Advisory DSA-2025-269 vom 2025-07-01
  https://www.dell.com/support/kbdoc/de-de/000338743/dsa-2025-269-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities