Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-7941

Fixed in a distro release EPSS 3%

libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.

Published 2015-11-18 · CVE record · OSV

Products: canonical ubuntu_linux, xmlsoft libxml2

Distro releases

ReleasePackageFixed in
Amazon Linux 2libxml22.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-python2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-static2.9.1-6.amzn2.3.2
Debian 12libxml22.9.2+really2.9.1+dfsg1-0.1
Debian 13libxml22.9.2+really2.9.1+dfsg1-0.1
Debian 14libxml22.9.2+really2.9.1+dfsg1-0.1
Debian 6.0libxml22.7.8.dfsg-2+squeeze12
Debian 7libxml22.8.0+dfsg1-7+wheezy5
Debian 8libxml22.9.1+dfsg1-5+deb8u1
Red Hat Enterprise Linux 6libxml20:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-debuginfo0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-devel0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-python0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-static0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 7libxml20:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-debuginfo0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-devel0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-python0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-static0:2.9.1-6.el7_2.2
SUSE Linux Enterprise Desktop 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 12libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 12libxml22.9.1-13.1
SUSE Linux Enterprise Server 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 12libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 12libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 12 SP1libxml22.9.1-13.1
Ubuntu 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.5
openSUSE Tumbleweedlibxml22.9.4-1.22
openSUSE Tumbleweedruby3.2-rubygem-nokogiri1.13.9-1.7
openSUSE Tumbleweedrubygem-nokogiri1.18.9-1.4
openSUSE Tumbleweedrubygem-nokogiri1.18.2-1.1
openSUSE Tumbleweedrubygem-nokogiri1.15.5-1.5
openSUSE Tumbleweedrubygem-nokogiri1.13.3-1.1
openSUSE Tumbleweedrubygem-nokogiri1.6.8.1-1.3