CVE-2015-8710
Fixed in a distro release EPSS 5%
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.
Products: xmlsoft libxml2, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | libxml2 | 2.9.1-6.amzn2.3.2 |
| Amazon Linux 2 | libxml2-devel | 2.9.1-6.amzn2.3.2 |
| Amazon Linux 2 | libxml2-python | 2.9.1-6.amzn2.3.2 |
| Amazon Linux 2 | libxml2-static | 2.9.1-6.amzn2.3.2 |
| Debian 12 | libxml2 | 2.9.2+really2.9.1+dfsg1-0.1 |
| Debian 13 | libxml2 | 2.9.2+really2.9.1+dfsg1-0.1 |
| Debian 14 | libxml2 | 2.9.2+really2.9.1+dfsg1-0.1 |
| Debian 6.0 | libxml2 | 2.7.8.dfsg-2+squeeze12 |
| Debian 7 | libxml2 | 2.8.0+dfsg1-7+wheezy5 |
| Debian 8 | libxml2 | 2.9.1+dfsg1-5+deb8u1 |
| Red Hat Enterprise Linux 6 | libxml2 | 0:2.7.6-20.el6_7.1 |
| Red Hat Enterprise Linux 6 | libxml2-debuginfo | 0:2.7.6-20.el6_7.1 |
| Red Hat Enterprise Linux 6 | libxml2-devel | 0:2.7.6-20.el6_7.1 |
| Red Hat Enterprise Linux 6 | libxml2-python | 0:2.7.6-20.el6_7.1 |
| Red Hat Enterprise Linux 6 | libxml2-static | 0:2.7.6-20.el6_7.1 |
| Red Hat Enterprise Linux 7 | libxml2 | 0:2.9.1-6.el7_2.2 |
| Red Hat Enterprise Linux 7 | libxml2-debuginfo | 0:2.9.1-6.el7_2.2 |
| Red Hat Enterprise Linux 7 | libxml2-devel | 0:2.9.1-6.el7_2.2 |
| Red Hat Enterprise Linux 7 | libxml2-python | 0:2.9.1-6.el7_2.2 |
| Red Hat Enterprise Linux 7 | libxml2-static | 0:2.9.1-6.el7_2.2 |
| SUSE Linux Enterprise Desktop 11 SP3 | libxml2 | 2.7.6-0.37.1 |
| SUSE Linux Enterprise Desktop 11 SP3 | libxml2-python | 2.7.6-0.37.4 |
| SUSE Linux Enterprise Desktop 11 SP4 | libxml2 | 2.7.6-0.37.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | libxml2-python | 2.7.6-0.37.4 |
| SUSE Linux Enterprise Desktop 12 | libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Desktop 12 | python-libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | python-libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Server 11 SP3 | libxml2 | 2.7.6-0.37.1 |
| SUSE Linux Enterprise Server 11 SP3 | libxml2-python | 2.7.6-0.37.4 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | libxml2 | 2.7.6-0.37.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | libxml2-python | 2.7.6-0.37.4 |
| SUSE Linux Enterprise Server 11 SP4 | libxml2 | 2.7.6-0.37.1 |
| SUSE Linux Enterprise Server 11 SP4 | libxml2-python | 2.7.6-0.37.4 |
| SUSE Linux Enterprise Server 12 | libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Server 12 | python-libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Server 12 SP1 | libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Server 12 SP1 | python-libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | libxml2 | 2.7.6-0.37.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | libxml2-python | 2.7.6-0.37.4 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxml2 | 2.7.6-0.37.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxml2-python | 2.7.6-0.37.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | python-libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python-libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | libxml2 | 2.7.6-0.37.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxml2 | 2.7.6-0.37.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libxml2 | 2.9.1-17.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libxml2 | 2.9.1-17.1 |
| Ubuntu 14.04 LTS | libxml2 | 2.9.1+dfsg1-3ubuntu4.7 |