NetSight
IP …
medium5.0

CVE-2015-1819

The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE…

Impact

The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04
RedhatEnterprise Linux
through 5.0
XmlsoftLibxml
All versions
OracleSolaris
Version 11.3
AppleIphone Os
through 9.2.1
AppleMac Os X
through 10.11.3
AppleTvos
through 9.1
AppleWatchos
through 2.1
OracleLinux
Version 7
OpensuseOpensuse
Versions 13.1, 13.2
FedoraprojectFedora
Versions 22, 23

Weakness classification

CWE-399

References