NVD

Id
28511  
Name
CVE-2015-8317  
Description
The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-06-12  
Published
2015-12-15  
Modified Date
2017-06-07  
Seq
2015-8317  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149805 28511 CVE-2015-8317 openSUSE-SU-2015:2372  View
149806 28511 CVE-2015-8317 openSUSE-SU-2016:0106  View
149807 28511 CVE-2015-8317 HPSBGN03537  View
149808 28511 CVE-2015-8317 RHSA-2015:2549  View
149809 28511 CVE-2015-8317 RHSA-2016:1089  View
149810 28511 CVE-2015-8317 DSA-3430  View
149811 28511 CVE-2015-8317 [oss-security] 20151121 Libxml2: Several out of bounds reads  View
149812 28511 CVE-2015-8317 [oss-security] 20151122 Re: Libxml2: Several out of bounds reads  View
149813 28511 CVE-2015-8317 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
149814 28511 CVE-2015-8317 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
149815 28511 CVE-2015-8317 77681  View
149816 28511 CVE-2015-8317 USN-2834-1  View
149817 28511 CVE-2015-8317 https://blog.fuzzing-project.org/28-Libxml2-Several-out-of-bounds-reads.html  View
149818 28511 CVE-2015-8317 https://bugzilla.gnome.org/show_bug.cgi?id=751603  View
149819 28511 CVE-2015-8317 https://bugzilla.gnome.org/show_bug.cgi?id=751631  View
149820 28511 CVE-2015-8317 https://bugzilla.redhat.com/show_bug.cgi?id=1281930  View
149821 28511 CVE-2015-8317 https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f26462a9d8333102e  View
149822 28511 CVE-2015-8317 https://git.gnome.org/browse/libxml2/commit/?id=9aa37588ee78a06ca1379a9d9356eab16686099c  View
149823 28511 CVE-2015-8317 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11118 JVNDB-2015-006438 libxml2 の parser.c の xmlParseXMLDecl 関数における重要な情報を取得される脆弱性 libxml2 の parser.c の xmlParseXMLDecl 関数には、重要な情報を取得される脆弱性が存在します。 CVE-2015-8317 85542 CVE-2015-8317 28511 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006438.html 2015-06-29 2016-02-02 View