NVD

Id
28379  
Name
CVE-2015-8035  
Description
The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-11-18  
Modified Date
2016-12-07  
Seq
2015-8035  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149177 28379 CVE-2015-8035 APPLE-SA-2016-03-21-1  View
149178 28379 CVE-2015-8035 APPLE-SA-2016-03-21-2  View
149179 28379 CVE-2015-8035 APPLE-SA-2016-03-21-3  View
149180 28379 CVE-2015-8035 APPLE-SA-2016-03-21-5  View
149181 28379 CVE-2015-8035 FEDORA-2016-189a7bf68c  View
149182 28379 CVE-2015-8035 FEDORA-2016-a9ee80b01d  View
149183 28379 CVE-2015-8035 openSUSE-SU-2015:2372  View
149184 28379 CVE-2015-8035 openSUSE-SU-2016:0106  View
149185 28379 CVE-2015-8035 RHSA-2016:1089  View
149186 28379 CVE-2015-8035 DSA-3430  View
149187 28379 CVE-2015-8035 [oss-security] 20151102 CVE request: DoS in libxml2 if xz is enabled  View
149188 28379 CVE-2015-8035 [oss-security] 20151102 Re: CVE request: DoS in libxml2 if xz is enabled  View
149189 28379 CVE-2015-8035 [oss-security] 20151103 Re: CVE request: DoS in libxml2 if xz is enabled  View
149190 28379 CVE-2015-8035 77390  View
149191 28379 CVE-2015-8035 USN-2812-1  View
149192 28379 CVE-2015-8035 http://xmlsoft.org/news.html  View
149193 28379 CVE-2015-8035 https://bugzilla.gnome.org/show_bug.cgi?id=757466  View
149194 28379 CVE-2015-8035 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017  View
149195 28379 CVE-2015-8035 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380  View
149196 28379 CVE-2015-8035 https://support.apple.com/HT206166  View
149197 28379 CVE-2015-8035 https://support.apple.com/HT206167  View
149198 28379 CVE-2015-8035 https://support.apple.com/HT206168  View
149199 28379 CVE-2015-8035 https://support.apple.com/HT206169  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10660 JVNDB-2015-005980 libxml2 の xzlib.c 内の xz_decomp 関数におけるサービス運用妨害 (DoS) の脆弱性 libxml2 の xzlib.c 内の xz_decomp 関数は、圧縮エラーを適切に検出しないため、サービス運用妨害 (プロセスハング) 状態にされる脆弱性が存在します。 CVE-2015-8035 85260 CVE-2015-8035 28379 2.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005980.html 2015-11-03 2016-09-08 View