NetSight
IP …
medium6.4

CVE-2015-8241

The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based …

Impact

The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Hpc Node
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0
HpIcewall Federation Agent
Version 3.0
HpIcewall File Manager
Version 3.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10
XmlsoftLibxml2
through 2.9.2

Weakness classification

CWE-119

References