CVE-2015-7500

Priority
Description
The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows
context-dependent attackers to cause a denial of service (out-of-bounds
heap read) via unspecified vectors related to incorrect entities boundaries
and start tags.
Assigned-to
mdeslaur
Notes
Package
Upstream:released (2.9.3)
Ubuntu 14.04 ESM (Trusty Tahr):released (2.9.1+dfsg1-3ubuntu4.6)
Ubuntu 16.04 LTS (Xenial Xerus):released (2.9.2+zdfsg1-4ubuntu2)
Patches:
Upstream:https://git.gnome.org/browse/libxml2/commit/?id=f1063fdbe7fa66332bbb76874101c2a7b51b519f
More Information

Updated: 2020-09-10 04:53:35 UTC (commit 81a23a978c4436cd99e1d040e9e73e9146876281)