Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-1819

Fixed in a distro release EPSS 6%

The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

Published 2015-08-14 · CVE record · OSV

Products: debian_linux, canonical ubuntu_linux, redhat enterprise_linux, xmlsoft libxml, oracle solaris, apple iphone_os, apple mac_os_x, apple tvos, apple watchos, oracle linux, opensuse, fedoraproject fedora

Fixed upstream

EcosystemPackageFixed in
RubyGemsnokogiri1.6.6.4

Distro releases

ReleasePackageFixed in
Amazon Linux 2libxml22.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-python2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-static2.9.1-6.amzn2.3.2
Debian 12libxml22.9.2+really2.9.1+dfsg1-0.1
Debian 13libxml22.9.2+really2.9.1+dfsg1-0.1
Debian 14libxml22.9.2+really2.9.1+dfsg1-0.1
Debian 6.0libxml22.7.8.dfsg-2+squeeze12
Debian 7libxml22.8.0+dfsg1-7+wheezy5
Debian 8libxml22.9.1+dfsg1-5+deb8u1
Red Hat Enterprise Linux 6libxml20:2.7.6-20.el6
Red Hat Enterprise Linux 6libxml2-debuginfo0:2.7.6-20.el6
Red Hat Enterprise Linux 6libxml2-devel0:2.7.6-20.el6
Red Hat Enterprise Linux 6libxml2-python0:2.7.6-20.el6
Red Hat Enterprise Linux 6libxml2-static0:2.7.6-20.el6
Red Hat Enterprise Linux 7libxml20:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-debuginfo0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-devel0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-python0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-static0:2.9.1-6.el7_2.2
SUSE Linux Enterprise Desktop 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 12libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 12libxml22.9.1-13.1
SUSE Linux Enterprise Server 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 12libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 12libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 12 SP1libxml22.9.1-13.1
Ubuntu 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.5
openSUSE Tumbleweedlibxml22.9.4-1.22
openSUSE Tumbleweedruby3.2-rubygem-nokogiri1.13.9-1.7
openSUSE Tumbleweedrubygem-nokogiri1.18.9-1.4
openSUSE Tumbleweedrubygem-nokogiri1.18.2-1.1
openSUSE Tumbleweedrubygem-nokogiri1.15.5-1.5
openSUSE Tumbleweedrubygem-nokogiri1.13.3-1.1
openSUSE Tumbleweedrubygem-nokogiri1.6.8.1-1.3