NetSight
IP …
medium6.8

CVE-2015-7942

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows …

Impact

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

Affected products

VendorProductAffected versions
HpIcewall Federation Agent
Version 3.0
HpIcewall File Manager
Version 3.0
DebianDebian Linux
Versions 7.0, 8.0
AppleIphone Os
through 9.2.1
AppleMac Os X
through 10.11.3
AppleTvos
through 9.1
AppleWatchos
through 2.1
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10
XmlsoftLibxml2
Version 2.9.2

Weakness classification

CWE-119

References