NVD

Id
28337  
Name
CVE-2015-7942  
Description
The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-11-18  
Modified Date
2016-12-07  
Seq
2015-7942  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
148884 28337 CVE-2015-7942 APPLE-SA-2016-03-21-1  View
148885 28337 CVE-2015-7942 APPLE-SA-2016-03-21-2  View
148886 28337 CVE-2015-7942 APPLE-SA-2016-03-21-3  View
148887 28337 CVE-2015-7942 APPLE-SA-2016-03-21-5  View
148888 28337 CVE-2015-7942 FEDORA-2016-189a7bf68c  View
148889 28337 CVE-2015-7942 FEDORA-2016-a9ee80b01d  View
148890 28337 CVE-2015-7942 openSUSE-SU-2015:2372  View
148891 28337 CVE-2015-7942 openSUSE-SU-2016:0106  View
148892 28337 CVE-2015-7942 HPSBGN03537  View
148893 28337 CVE-2015-7942 RHSA-2015:2549  View
148894 28337 CVE-2015-7942 RHSA-2015:2550  View
148895 28337 CVE-2015-7942 RHSA-2016:1089  View
148896 28337 CVE-2015-7942 DSA-3430  View
148897 28337 CVE-2015-7942 [oss-security] 20151022 Crafted xml causes out of bound memory access - Libxml2  View
148898 28337 CVE-2015-7942 [oss-security] 20151022 Re: Crafted xml causes out of bound memory access - Libxml2  View
148899 28337 CVE-2015-7942 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
148900 28337 CVE-2015-7942 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
148901 28337 CVE-2015-7942 79507  View
148902 28337 CVE-2015-7942 USN-2812-1  View
148903 28337 CVE-2015-7942 http://xmlsoft.org/news.html  View
148904 28337 CVE-2015-7942 https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8  View
148905 28337 CVE-2015-7942 https://bugzilla.gnome.org/show_bug.cgi?id=756456  View
148906 28337 CVE-2015-7942 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172  View
148907 28337 CVE-2015-7942 https://support.apple.com/HT206166  View
148908 28337 CVE-2015-7942 https://support.apple.com/HT206167  View
148909 28337 CVE-2015-7942 https://support.apple.com/HT206168  View
148910 28337 CVE-2015-7942 https://support.apple.com/HT206169  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10659 JVNDB-2015-005979 libxml2 の parser.c 内の xmlParseConditionalSections 関数におけるサービス運用妨害 (DoS) の脆弱性 libxml2 の parser.c 内の xmlParseConditionalSections 関数は、無効な入力の構文解析を停止する際、中間エンティティ (intermediary entities) を適切にスキップしないため、サービス運用妨害 (out-of-bounds read およびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-7942 85167 CVE-2015-7942 28337 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005979.html 2015-10-23 2016-03-29 View