NetSight
IP …
medium5.0

CVE-2015-7498

Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service …

Impact

Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

Affected products

VendorProductAffected versions
HpIcewall Federation Agent
Version 3.0
HpIcewall File Manager
Version 3.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10
DebianDebian Linux
Versions 7.0, 8.0
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Hpc Node
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0
XmlsoftLibxml2
through 2.9.2

Weakness classification

CWE-119

References