Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-8317

Fixed in a distro release EPSS 6%

The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.

Published 2015-12-15 · CVE record · OSV

Products: debian_linux, canonical ubuntu_linux, xmlsoft libxml2, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation, hp icewall_federation_agent, hp icewall_file_manager

Distro releases

ReleasePackageFixed in
Amazon Linux 2libxml22.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-python2.9.1-6.amzn2.3.2
Amazon Linux 2libxml2-static2.9.1-6.amzn2.3.2
Debian 12libxml22.9.2+zdfsg1-4
Debian 13libxml22.9.2+zdfsg1-4
Debian 14libxml22.9.2+zdfsg1-4
Debian 6.0libxml22.7.8.dfsg-2+squeeze15
Debian 7libxml22.8.0+dfsg1-7+wheezy5
Debian 8libxml22.9.1+dfsg1-5+deb8u1
Red Hat Enterprise Linux 6libxml20:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-debuginfo0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-devel0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-python0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 6libxml2-static0:2.7.6-20.el6_7.1
Red Hat Enterprise Linux 7libxml20:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-debuginfo0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-devel0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-python0:2.9.1-6.el7_2.2
Red Hat Enterprise Linux 7libxml2-static0:2.9.1-6.el7_2.2
SUSE Linux Enterprise Desktop 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Desktop 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Desktop 12libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Desktop 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP3-TERADATAlibxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server 12libxml22.9.1-13.1
SUSE Linux Enterprise Server 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4libxml2-python2.7.6-0.34.4
SUSE Linux Enterprise Server for SAP Applications 12libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12python-libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1libxml22.9.1-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1python-libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 11 SP3libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 11 SP4libxml22.7.6-0.34.1
SUSE Linux Enterprise Software Development Kit 12libxml22.9.1-13.1
SUSE Linux Enterprise Software Development Kit 12 SP1libxml22.9.1-13.1
Ubuntu 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.6
openSUSE Tumbleweedruby3.2-rubygem-nokogiri1.13.9-1.7
openSUSE Tumbleweedrubygem-nokogiri1.18.9-1.4
openSUSE Tumbleweedrubygem-nokogiri1.18.2-1.1
openSUSE Tumbleweedrubygem-nokogiri1.15.5-1.5
openSUSE Tumbleweedrubygem-nokogiri1.6.8.1-1.3
openSUSE Tumbleweedrubygem-nokogiri1.13.3-1.1