Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-7942

Fixed in a distro release EPSS 4%

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

Published 2015-11-18 · CVE record · OSV

Products: hp icewall_federation_agent, hp icewall_file_manager, debian_linux, apple iphone_os, apple mac_os_x, apple tvos, apple watchos, canonical ubuntu_linux, xmlsoft libxml2

Distro releases

ReleasePackageFixed in
Amazon Linux 2libxml22.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-python2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-static2.9.1-6.amzn2.3.2
Debian 12libxml22.9.3+dfsg1-1
Debian 13libxml22.9.3+dfsg1-1
Debian 14libxml22.9.3+dfsg1-1
Debian 6.0libxml22.7.8.dfsg-2+squeeze13
Debian 7libxml22.8.0+dfsg1-7+wheezy5
Debian 8libxml22.9.1+dfsg1-5+deb8u1
Red Hat Enterprise Linux 6libxml20:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-debuginfo0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-devel0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-python0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-static0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 7libxml20:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-debuginfo0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-devel0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-python0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-static0:2.9.1-6.el7_2.2
SUSE Linux Enterprise Desktop 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 12libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 12libxml22.9.1-13.1
SUSE Linux Enterprise Server 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 12libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 12libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 12 SP1libxml22.9.1-13.1
Ubuntu 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.5
openSUSE Tumbleweedlibxml22.9.4-1.22
openSUSE Tumbleweedruby3.2-rubygem-nokogiri1.13.9-1.7
openSUSE Tumbleweedrubygem-nokogiri1.18.9-1.4
openSUSE Tumbleweedrubygem-nokogiri1.18.2-1.1
openSUSE Tumbleweedrubygem-nokogiri1.15.5-1.5
openSUSE Tumbleweedrubygem-nokogiri1.13.3-1.1
openSUSE Tumbleweedrubygem-nokogiri1.6.8.1-1.3