NVD

Id
26504  
Name
CVE-2015-5312  
Description
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-12-15  
Modified Date
2016-12-07  
Seq
2015-5312  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140234 26504 CVE-2015-5312 APPLE-SA-2016-03-21-1  View
140235 26504 CVE-2015-5312 APPLE-SA-2016-03-21-2  View
140236 26504 CVE-2015-5312 APPLE-SA-2016-03-21-3  View
140237 26504 CVE-2015-5312 APPLE-SA-2016-03-21-5  View
140238 26504 CVE-2015-5312 openSUSE-SU-2015:2372  View
140239 26504 CVE-2015-5312 openSUSE-SU-2016:0106  View
140240 26504 CVE-2015-5312 HPSBGN03537  View
140241 26504 CVE-2015-5312 RHSA-2015:2549  View
140242 26504 CVE-2015-5312 RHSA-2015:2550  View
140243 26504 CVE-2015-5312 RHSA-2016:1089  View
140244 26504 CVE-2015-5312 DSA-3430  View
140245 26504 CVE-2015-5312 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
140246 26504 CVE-2015-5312 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
140247 26504 CVE-2015-5312 79536  View
140248 26504 CVE-2015-5312 USN-2834-1  View
140249 26504 CVE-2015-5312 http://xmlsoft.org/news.html  View
140250 26504 CVE-2015-5312 https://bugzilla.redhat.com/show_bug.cgi?id=1276693  View
140251 26504 CVE-2015-5312 https://git.gnome.org/browse/libxml2/commit/?id=69030714cde66d525a8884bda01b9e8f0abf8e1e  View
140252 26504 CVE-2015-5312 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172  View
140253 26504 CVE-2015-5312 https://support.apple.com/HT206166  View
140254 26504 CVE-2015-5312 https://support.apple.com/HT206167  View
140255 26504 CVE-2015-5312 https://support.apple.com/HT206168  View
140256 26504 CVE-2015-5312 https://support.apple.com/HT206169  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11111 JVNDB-2015-006431 libxml2 の parser.c の xmlStringLenDecodeEntities 関数におけるサービス運用妨害 (DoS) の脆弱性 libxml2 の parser.c の xmlStringLenDecodeEntities 関数は、エンティティの拡張を適切に制限しないため、サービス運用妨害 (CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2015-5312 82537 CVE-2015-5312 26504 7.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006431.html 2015-11-20 2016-03-29 View