Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-8242

Fixed in a distro release EPSS 4%

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

Published 2015-12-15 · CVE record · OSV

Products: xmlsoft libxml2, hp icewall_federation_agent, hp icewall_file_manager, apple iphone_os, apple mac_os_x, apple tvos, apple watchos, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Amazon Linux 2libxml22.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-python2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-static2.9.1-6.amzn2.3.2
Debian 12libxml22.9.3+dfsg1-1
Debian 13libxml22.9.3+dfsg1-1
Debian 14libxml22.9.3+dfsg1-1
Red Hat Enterprise Linux 6libxml20:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-debuginfo0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-devel0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-python0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-static0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 7libxml20:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-debuginfo0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-devel0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-python0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-static0:2.9.1-6.el7_2.2
SUSE Linux Enterprise Desktop 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 12libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 12libxml22.9.1-13.1
SUSE Linux Enterprise Server 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 12libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 12libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 12 SP1libxml22.9.1-13.1
Ubuntu 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.6
openSUSE Tumbleweedlibxml22.9.4-1.22
openSUSE Tumbleweedruby3.2-rubygem-nokogiri1.13.9-1.7
openSUSE Tumbleweedrubygem-nokogiri1.18.2-1.1
openSUSE Tumbleweedrubygem-nokogiri1.6.8.1-1.3
openSUSE Tumbleweedrubygem-nokogiri1.13.3-1.1
openSUSE Tumbleweedrubygem-nokogiri1.15.5-1.5
openSUSE Tumbleweedrubygem-nokogiri1.18.9-1.4