Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 3 min 132 bronnen 1 kritiek 3 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2015-7942

MEDIUM · 6.8 CVSS Gepubliceerd: CWE-119

Beschrijving

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

Vendors

Hp Debian Apple Canonical Xmlsoft

Affected products

Icewall Federation Agent Icewall File Manager Debian Linux Iphone Os Mac Os X Tvos Watchos Ubuntu Linux Libxml2

References