CVE-2015-7500

CWE-119 — Buffer OverflowCWE-122 — Heap-based Buffer Overflow13 documents9 sources
Severity
5.0MEDIUM
EPSS
1.5%
top 18.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
13
Apple Iphone OSApple MAC OS XApple Tvos+10 more
Timeline
PublishedDec 15
Latest updateMay 14

Description

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages13 packages

▶Debianlibxml2< 2.9.3+dfsg1-1+3
▶Ubuntulibxml2< 2.9.1+dfsg1-3ubuntu4.6
▶NVDxmlsoft/libxml22.9.2
▶NVDapple/tvos9.1
▶NVDapple/watchos2.1

Also affects: Debian Linux 7.0, 8.0, Ubuntu Linux 12.04, 14.04, 15.04, 15.10

🔴Vulnerability Details

4
GHSA
GHSA-vqj7-f9h9-2m3r: The xmlParseMisc function in parser↗2022-05-14
▶
OSV
CVE-2015-7500: The xmlParseMisc function in parser↗2015-12-15
▶
CVEList
CVE-2015-7500: The xmlParseMisc function in parser↗2015-12-15
▶
OSV
libxml2 vulnerabilities↗2015-12-14
▶

📋Vendor Advisories

7
Ubuntu
libxml2 vulnerabilities↗2015-12-14
▶
Red Hat
libxml2: Heap buffer overflow in xmlParseMisc↗2015-12-01
▶
Debian
CVE-2015-7500: libxml2 - The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dep...↗2015
▶
Apple
CVE-2015-7500: OS X El Capitan v10.11.4 and Security Update 2016-002↗
▶
Apple
CVE-2015-7500: iOS 9.3↗
▶

💬Community

1
Bugzilla
CVE-2015-7500 libxml2: Heap buffer overflow in xmlParseMisc↗2015-11-13
▶
CVE-2015-7500 (MEDIUM CVSS 5) | The xmlParseMisc function in parser | cvebase.io