libxml2: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2015-7941

  libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial …

  libxml2 libxml2 Debian Ubuntu
  Nov 18, 2015
• Unscored —
  CVE-2015-7942

  The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it st…

  libxml2 libxml2 Debian Ubuntu
  Nov 18, 2015

Revision history

1. 2025-03-20 #21

   Neue Updates von Oracle Linux aufgenommen

2. 2017-02-02 #20

   New remediations available

3. 2016-05-19 #18

   New remediations available

4. 2016-05-19 #19

   Version nicht vorhanden

5. 2016-03-16 #17

   New remediations available

6. 2016-02-16 #15

   New remediations available

7. 2016-02-16 #16

   Version nicht vorhanden

8. 2016-01-11 #13

   New remediations available

9. 2016-01-11 #14

   Version nicht vorhanden

10. 2015-12-23 #11

    New remediations available

11. 2015-12-23 #12

    Version nicht vorhanden

12. 2015-12-09 #9

    New remediations available

13. 2015-12-09 #10

    Version nicht vorhanden

14. 2015-12-07 #8

    New remediations available

15. 2015-11-22 #7

    New remediations available

16. 2015-11-17 #5

    New remediations available

17. 2015-11-17 #6

    Version nicht vorhanden

18. 2015-10-21 #1

    Initial Release

19. 2015-10-21 #2

    Version nicht vorhanden

20. 2015-10-21 #3

    Version nicht vorhanden

21. 2015-10-21 #4

    Version nicht vorhanden

References

• OSS Security Mailinglist vom 2015-10-21
  http://seclists.org/oss-sec/2015/q4/127
• Meldung WLB-2015100145 auf CXSecurity vom 2015-10-22
  https://cxsecurity.com/issue/WLB-2015100145
• Ubuntu Security Notice USN-2812-1 vom 2015-11-17
  http://www.ubuntu.com/usn/usn-2812-1/
• xmlsoft.org Release Notes v2.9.3 vom 2015-11-22
  http://www.xmlsoft.org/news.html
• Red Hat Security Advisory RHSA-2015:2550-1 vom 2015-12-07
  http://rhn.redhat.com/errata/RHSA-2015-2550.html
• Red Hat Security Advisory RHSA-2015:2549-1 vom 2015-12-07
  http://rhn.redhat.com/errata/RHSA-2015-2549.html
• CentOS-announce CESA-2015:2549 vom 2015-12-09
  https://lists.centos.org/pipermail/centos-announce/2015-December/021516.html
• Debian Security Advisory DSA-3430 vom 2015-12-24
  https://www.debian.org/security/2015/dsa-3430
• SUSE Security Update SUSE-SU-2016:0030-1 vom 2016-01-12
  https://www.suse.com/support/update/announcement/2016/suse-su-20160030-1.html
• SUSE Security Update SUSE-SU-2016:0049-1 vom 2016-01-12
  https://www.suse.com/support/update/announcement/2016/suse-su-20160049-1.html
• F5 Security Advisory SOL61570943
  https://support.f5.com/kb/en-us/solutions/public/k/61/sol61570943.html?ref=rss
• SUSE Security Update SUSE-SU-2016:0786-1 vom 2016-03-16
  https://www.suse.com/support/update/announcement/2016/suse-su-20160786-1.html
• Red Hat Security Advisory RHSA-2016:1089-1 vom 2016-05-17
  http://rhn.redhat.com/errata/RHSA-2016-1089.html
• Tenable Advisory ID: TNS-2017-03
  https://www.tenable.com/security/tns-2017-03
• Oracle Linux Security Advisory ELSA-2025-2673 vom 2025-03-21
  https://linux.oracle.com/errata/ELSA-2025-2673.html