csaf_suse - suse-su-2016:0049-1

Vulnerability from csaf_suse

Published

2016-01-07 12:52

Modified

2016-01-07 12:52

Summary

Security update for libxml2

Notes

Title of the patch

Security update for libxml2

Description of the patch

- security update: This update fixes the following security issues: * CVE-2015-1819 Enforce the reader to run in constant memory [bnc#928193] * CVE-2015-7941 Fix out of bound read with crafted xml input by stopping parsing on entities boundaries errors [bnc#951734] * CVE-2015-7942 Fix another variation of overflow in Conditional sections [bnc#951735] * CVE-2015-8241 Avoid extra processing of MarkupDecl when EOF [bnc#956018] * CVE-2015-8242 Buffer overead with HTML parser in push mode [bnc#956021] * CVE-2015-8317 Return if the encoding declaration is broken or encoding conversion failed [bnc#956260] * CVE-2015-5312 Fix another entity expansion issue [bnc#957105] * CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey [bnc#957106] * CVE-2015-7498 Processes entities after encoding conversion failures [bnc#957107] * CVE-2015-7499 Add xmlHaltParser() to stop the parser / Detect incoherency on GROW [bnc#957109] * CVE-2015-8317 Multiple out-of-bound read could lead to denial of service [bnc#956260] * CVE-2015-8035 DoS when parsing specially crafted XML document if XZ support is enabled [bnc#954429] * CVE-2015-7500 Fix memory access error due to incorrect entities boundaries [bnc#957110]

Patchnames

SUSE-SLE-DESKTOP-12-2016-38,SUSE-SLE-DESKTOP-12-SP1-2016-38,SUSE-SLE-SDK-12-2016-38,SUSE-SLE-SDK-12-SP1-2016-38,SUSE-SLE-SERVER-12-2016-38,SUSE-SLE-SERVER-12-SP1-2016-38

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for libxml2",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "- security update:\n      This update fixes the following security issues: \n\n    * CVE-2015-1819 Enforce the reader to run in constant memory [bnc#928193]\n    * CVE-2015-7941 Fix out of bound read with crafted xml input by stopping parsing on entities boundaries errors [bnc#951734]\n    * CVE-2015-7942 Fix another variation of overflow in Conditional sections [bnc#951735]\n    * CVE-2015-8241 Avoid extra processing of MarkupDecl when EOF [bnc#956018]\n    * CVE-2015-8242 Buffer overead with HTML parser in push mode [bnc#956021]\n    * CVE-2015-8317 Return if the encoding declaration is broken or encoding conversion failed [bnc#956260]\n    * CVE-2015-5312 Fix another entity expansion issue [bnc#957105]\n    * CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey [bnc#957106]\n    * CVE-2015-7498 Processes entities after encoding conversion failures [bnc#957107]\n    * CVE-2015-7499 Add xmlHaltParser() to stop the parser / Detect incoherency on GROW [bnc#957109]\n    * CVE-2015-8317 Multiple out-of-bound read could lead to denial of service [bnc#956260]\n    * CVE-2015-8035 DoS when parsing specially crafted XML document if XZ support is enabled [bnc#954429]\n    * CVE-2015-7500 Fix memory access error due to incorrect entities boundaries [bnc#957110] \n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-SLE-DESKTOP-12-2016-38,SUSE-SLE-DESKTOP-12-SP1-2016-38,SUSE-SLE-SDK-12-2016-38,SUSE-SLE-SDK-12-SP1-2016-38,SUSE-SLE-SERVER-12-2016-38,SUSE-SLE-SERVER-12-SP1-2016-38",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0049-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2016:0049-1",
            url: "https://www.suse.com/support/update/announcement/2016/suse-su-20160049-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2016:0049-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2016-January/001788.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 928193",
            url: "https://bugzilla.suse.com/928193",
         },
         {
            category: "self",
            summary: "SUSE Bug 951734",
            url: "https://bugzilla.suse.com/951734",
         },
         {
            category: "self",
            summary: "SUSE Bug 951735",
            url: "https://bugzilla.suse.com/951735",
         },
         {
            category: "self",
            summary: "SUSE Bug 954429",
            url: "https://bugzilla.suse.com/954429",
         },
         {
            category: "self",
            summary: "SUSE Bug 956018",
            url: "https://bugzilla.suse.com/956018",
         },
         {
            category: "self",
            summary: "SUSE Bug 956021",
            url: "https://bugzilla.suse.com/956021",
         },
         {
            category: "self",
            summary: "SUSE Bug 956260",
            url: "https://bugzilla.suse.com/956260",
         },
         {
            category: "self",
            summary: "SUSE Bug 957105",
            url: "https://bugzilla.suse.com/957105",
         },
         {
            category: "self",
            summary: "SUSE Bug 957106",
            url: "https://bugzilla.suse.com/957106",
         },
         {
            category: "self",
            summary: "SUSE Bug 957107",
            url: "https://bugzilla.suse.com/957107",
         },
         {
            category: "self",
            summary: "SUSE Bug 957109",
            url: "https://bugzilla.suse.com/957109",
         },
         {
            category: "self",
            summary: "SUSE Bug 957110",
            url: "https://bugzilla.suse.com/957110",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-1819 page",
            url: "https://www.suse.com/security/cve/CVE-2015-1819/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-5312 page",
            url: "https://www.suse.com/security/cve/CVE-2015-5312/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7497 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7497/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7498 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7498/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7499 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7499/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7500 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7500/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7941 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7941/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7942 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7942/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8035 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8035/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8241 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8241/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8242 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8242/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8317 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8317/",
         },
      ],
      title: "Security update for libxml2",
      tracking: {
         current_release_date: "2016-01-07T12:52:24Z",
         generator: {
            date: "2016-01-07T12:52:24Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2016:0049-1",
         initial_release_date: "2016-01-07T12:52:24Z",
         revision_history: [
            {
               date: "2016-01-07T12:52:24Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-doc-2.9.1-13.1.noarch",
                        product: {
                           name: "libxml2-doc-2.9.1-13.1.noarch",
                           product_id: "libxml2-doc-2.9.1-13.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.1-13.1.ppc64le",
                        product: {
                           name: "libxml2-devel-2.9.1-13.1.ppc64le",
                           product_id: "libxml2-devel-2.9.1-13.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.1-13.1.ppc64le",
                        product: {
                           name: "libxml2-2-2.9.1-13.1.ppc64le",
                           product_id: "libxml2-2-2.9.1-13.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.1-13.1.ppc64le",
                        product: {
                           name: "libxml2-tools-2.9.1-13.1.ppc64le",
                           product_id: "libxml2-tools-2.9.1-13.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-libxml2-2.9.1-13.1.ppc64le",
                        product: {
                           name: "python-libxml2-2.9.1-13.1.ppc64le",
                           product_id: "python-libxml2-2.9.1-13.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.1-13.1.s390x",
                        product: {
                           name: "libxml2-devel-2.9.1-13.1.s390x",
                           product_id: "libxml2-devel-2.9.1-13.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.1-13.1.s390x",
                        product: {
                           name: "libxml2-2-2.9.1-13.1.s390x",
                           product_id: "libxml2-2-2.9.1-13.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-32bit-2.9.1-13.1.s390x",
                        product: {
                           name: "libxml2-2-32bit-2.9.1-13.1.s390x",
                           product_id: "libxml2-2-32bit-2.9.1-13.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.1-13.1.s390x",
                        product: {
                           name: "libxml2-tools-2.9.1-13.1.s390x",
                           product_id: "libxml2-tools-2.9.1-13.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-libxml2-2.9.1-13.1.s390x",
                        product: {
                           name: "python-libxml2-2.9.1-13.1.s390x",
                           product_id: "python-libxml2-2.9.1-13.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.1-13.1.x86_64",
                        product: {
                           name: "libxml2-2-2.9.1-13.1.x86_64",
                           product_id: "libxml2-2-2.9.1-13.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-32bit-2.9.1-13.1.x86_64",
                        product: {
                           name: "libxml2-2-32bit-2.9.1-13.1.x86_64",
                           product_id: "libxml2-2-32bit-2.9.1-13.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.1-13.1.x86_64",
                        product: {
                           name: "libxml2-tools-2.9.1-13.1.x86_64",
                           product_id: "libxml2-tools-2.9.1-13.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-libxml2-2.9.1-13.1.x86_64",
                        product: {
                           name: "python-libxml2-2.9.1-13.1.x86_64",
                           product_id: "python-libxml2-2.9.1-13.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.1-13.1.x86_64",
                        product: {
                           name: "libxml2-devel-2.9.1-13.1.x86_64",
                           product_id: "libxml2-devel-2.9.1-13.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12",
                           product_id: "SUSE Linux Enterprise Desktop 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP1",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP1",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12",
                        product: {
                           name: "SUSE Linux Enterprise Server 12",
                           product_id: "SUSE Linux Enterprise Server 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP1",
                           product_id: "SUSE Linux Enterprise Server 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp1",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12",
               product_id: "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-devel-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12",
               product_id: "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-devel-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
               product_id: "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-devel-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-devel-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-devel-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-devel-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-2-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-2-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.1-13.1.noarch as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
            },
            product_reference: "libxml2-doc-2.9.1-13.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
            },
            product_reference: "python-libxml2-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
            },
            product_reference: "python-libxml2-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-2-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-2-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.1-13.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
            },
            product_reference: "libxml2-doc-2.9.1-13.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
            },
            product_reference: "python-libxml2-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
            },
            product_reference: "python-libxml2-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-2-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-2-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.1-13.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
            },
            product_reference: "libxml2-doc-2.9.1-13.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
            },
            product_reference: "python-libxml2-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
            },
            product_reference: "python-libxml2-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-2-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-2-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.1-13.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
            },
            product_reference: "libxml2-doc-2.9.1-13.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
            },
            product_reference: "python-libxml2-2.9.1-13.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
            },
            product_reference: "python-libxml2-2.9.1-13.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-13.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2015-1819",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-1819",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-1819",
               url: "https://www.suse.com/security/cve/CVE-2015-1819",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-1819",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 928193 for CVE-2015-1819",
               url: "https://bugzilla.suse.com/928193",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-1819",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-1819",
      },
      {
         cve: "CVE-2015-5312",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-5312",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-5312",
               url: "https://www.suse.com/security/cve/CVE-2015-5312",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-5312",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957105 for CVE-2015-5312",
               url: "https://bugzilla.suse.com/957105",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-5312",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-5312",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "important",
            },
         ],
         title: "CVE-2015-5312",
      },
      {
         cve: "CVE-2015-7497",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7497",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7497",
               url: "https://www.suse.com/security/cve/CVE-2015-7497",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7497",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957106 for CVE-2015-7497",
               url: "https://bugzilla.suse.com/957106",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-7497",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7497",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7497",
      },
      {
         cve: "CVE-2015-7498",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7498",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7498",
               url: "https://www.suse.com/security/cve/CVE-2015-7498",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7498",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957107 for CVE-2015-7498",
               url: "https://bugzilla.suse.com/957107",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-7498",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7498",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7498",
      },
      {
         cve: "CVE-2015-7499",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7499",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7499",
               url: "https://www.suse.com/security/cve/CVE-2015-7499",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7499",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957109 for CVE-2015-7499",
               url: "https://bugzilla.suse.com/957109",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-7499",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7499",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7499",
      },
      {
         cve: "CVE-2015-7500",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7500",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7500",
               url: "https://www.suse.com/security/cve/CVE-2015-7500",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7500",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957110 for CVE-2015-7500",
               url: "https://bugzilla.suse.com/957110",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-7500",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7500",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7500",
      },
      {
         cve: "CVE-2015-7941",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7941",
            },
         ],
         notes: [
            {
               category: "general",
               text: "libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7941",
               url: "https://www.suse.com/security/cve/CVE-2015-7941",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7941",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 951734 for CVE-2015-7941",
               url: "https://bugzilla.suse.com/951734",
            },
            {
               category: "external",
               summary: "SUSE Bug 951735 for CVE-2015-7941",
               url: "https://bugzilla.suse.com/951735",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7941",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "low",
            },
         ],
         title: "CVE-2015-7941",
      },
      {
         cve: "CVE-2015-7942",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7942",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7942",
               url: "https://www.suse.com/security/cve/CVE-2015-7942",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7942",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 951735 for CVE-2015-7942",
               url: "https://bugzilla.suse.com/951735",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7942",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "low",
            },
         ],
         title: "CVE-2015-7942",
      },
      {
         cve: "CVE-2015-8035",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8035",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8035",
               url: "https://www.suse.com/security/cve/CVE-2015-8035",
            },
            {
               category: "external",
               summary: "SUSE Bug 1088279 for CVE-2015-8035",
               url: "https://bugzilla.suse.com/1088279",
            },
            {
               category: "external",
               summary: "SUSE Bug 1105166 for CVE-2015-8035",
               url: "https://bugzilla.suse.com/1105166",
            },
            {
               category: "external",
               summary: "SUSE Bug 954429 for CVE-2015-8035",
               url: "https://bugzilla.suse.com/954429",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "low",
            },
         ],
         title: "CVE-2015-8035",
      },
      {
         cve: "CVE-2015-8241",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8241",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8241",
               url: "https://www.suse.com/security/cve/CVE-2015-8241",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-8241",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 956018 for CVE-2015-8241",
               url: "https://bugzilla.suse.com/956018",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-8241",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-8241",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-8241",
      },
      {
         cve: "CVE-2015-8242",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8242",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8242",
               url: "https://www.suse.com/security/cve/CVE-2015-8242",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-8242",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 956021 for CVE-2015-8242",
               url: "https://bugzilla.suse.com/956021",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-8242",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-8242",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-8242",
      },
      {
         cve: "CVE-2015-8317",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8317",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8317",
               url: "https://www.suse.com/security/cve/CVE-2015-8317",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-8317",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 956260 for CVE-2015-8317",
               url: "https://bugzilla.suse.com/956260",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-8317",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-8317",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-13.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-13.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-13.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-01-07T12:52:24Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-8317",
      },
   ],
}

cve-2015-8241

Vulnerability from cvelistv5

Published

2015-12-15 21:00

Modified

2024-08-06 08:13

Severity ?

Summary

The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2015/11/17/5	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/77621	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-2834-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2015/11/18/23	mailing-list, x_refsource_MLIST
	https://git.gnome.org/browse/libxml2/commit/?id=ab2b9a93ff19cedde7befbf2fcc48c6e352b6cbe	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.gnome.org/show_bug.cgi?id=756263	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1281936	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.137Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  name: "[oss-security] 20151118 Buffer overflow in libxml2",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/17/5",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "77621",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77621",
               },
               {
                  name: "USN-2834-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2834-1",
               },
               {
                  name: "[oss-security] 20151118 Re: Buffer overflow in libxml2",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/18/23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=ab2b9a93ff19cedde7befbf2fcc48c6e352b6cbe",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.gnome.org/show_bug.cgi?id=756263",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281936",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-18T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               name: "[oss-security] 20151118 Buffer overflow in libxml2",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/17/5",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "77621",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77621",
            },
            {
               name: "USN-2834-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2834-1",
            },
            {
               name: "[oss-security] 20151118 Re: Buffer overflow in libxml2",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/18/23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=ab2b9a93ff19cedde7befbf2fcc48c6e352b6cbe",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.gnome.org/show_bug.cgi?id=756263",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281936",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8241",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2015:2550",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
                  },
                  {
                     name: "openSUSE-SU-2016:0106",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
                  },
                  {
                     name: "[oss-security] 20151118 Buffer overflow in libxml2",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/17/5",
                  },
                  {
                     name: "DSA-3430",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3430",
                  },
                  {
                     name: "RHSA-2016:1089",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                  },
                  {
                     name: "77621",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77621",
                  },
                  {
                     name: "USN-2834-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2834-1",
                  },
                  {
                     name: "[oss-security] 20151118 Re: Buffer overflow in libxml2",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/18/23",
                  },
                  {
                     name: "https://git.gnome.org/browse/libxml2/commit/?id=ab2b9a93ff19cedde7befbf2fcc48c6e352b6cbe",
                     refsource: "CONFIRM",
                     url: "https://git.gnome.org/browse/libxml2/commit/?id=ab2b9a93ff19cedde7befbf2fcc48c6e352b6cbe",
                  },
                  {
                     name: "1034243",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034243",
                  },
                  {
                     name: "RHSA-2015:2549",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
                  },
                  {
                     name: "HPSBGN03537",
                     refsource: "HP",
                     url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                  },
                  {
                     name: "openSUSE-SU-2015:2372",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
                  },
                  {
                     name: "https://bugzilla.gnome.org/show_bug.cgi?id=756263",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.gnome.org/show_bug.cgi?id=756263",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1281936",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281936",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8241",
      datePublished: "2015-12-15T21:00:00",
      dateReserved: "2015-11-18T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.137Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8242

Vulnerability from cvelistv5

Published

2015-12-15 21:00

Modified

2024-08-06 08:13

Severity ?

Summary

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2015/11/17/5	mailing-list, x_refsource_MLIST
	https://support.apple.com/HT206167	x_refsource_CONFIRM
	https://support.apple.com/HT206168	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=8fb4a770075628d6441fb17a1e435100e2f3b1a2	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1281950	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2834-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2015/11/18/23	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.gnome.org/show_bug.cgi?id=756372	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/77681	vdb-entry, x_refsource_BID
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206169	x_refsource_CONFIRM
	https://support.apple.com/HT206166	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:31.676Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-5",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  name: "[oss-security] 20151118 Buffer overflow in libxml2",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/17/5",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206167",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206168",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=8fb4a770075628d6441fb17a1e435100e2f3b1a2",
               },
               {
                  name: "APPLE-SA-2016-03-21-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281950",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
               },
               {
                  name: "USN-2834-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2834-1",
               },
               {
                  name: "[oss-security] 20151118 Re: Buffer overflow in libxml2",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/18/23",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.gnome.org/show_bug.cgi?id=756372",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  name: "77681",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77681",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206169",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206166",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-18T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "APPLE-SA-2016-03-21-5",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               name: "[oss-security] 20151118 Buffer overflow in libxml2",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/17/5",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206167",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206168",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=8fb4a770075628d6441fb17a1e435100e2f3b1a2",
            },
            {
               name: "APPLE-SA-2016-03-21-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281950",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "APPLE-SA-2016-03-21-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
            },
            {
               name: "USN-2834-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2834-1",
            },
            {
               name: "[oss-security] 20151118 Re: Buffer overflow in libxml2",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/18/23",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.gnome.org/show_bug.cgi?id=756372",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               name: "77681",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77681",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               name: "APPLE-SA-2016-03-21-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206169",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206166",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8242",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2015:2550",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-5",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
                  },
                  {
                     name: "openSUSE-SU-2016:0106",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
                  },
                  {
                     name: "[oss-security] 20151118 Buffer overflow in libxml2",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/17/5",
                  },
                  {
                     name: "https://support.apple.com/HT206167",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206167",
                  },
                  {
                     name: "https://support.apple.com/HT206168",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206168",
                  },
                  {
                     name: "https://git.gnome.org/browse/libxml2/commit/?id=8fb4a770075628d6441fb17a1e435100e2f3b1a2",
                     refsource: "CONFIRM",
                     url: "https://git.gnome.org/browse/libxml2/commit/?id=8fb4a770075628d6441fb17a1e435100e2f3b1a2",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-1",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
                  },
                  {
                     name: "http://xmlsoft.org/news.html",
                     refsource: "CONFIRM",
                     url: "http://xmlsoft.org/news.html",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1281950",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281950",
                  },
                  {
                     name: "RHSA-2016:1089",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-2",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
                  },
                  {
                     name: "USN-2834-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2834-1",
                  },
                  {
                     name: "[oss-security] 20151118 Re: Buffer overflow in libxml2",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/18/23",
                  },
                  {
                     name: "1034243",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034243",
                  },
                  {
                     name: "RHSA-2015:2549",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
                  },
                  {
                     name: "https://bugzilla.gnome.org/show_bug.cgi?id=756372",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.gnome.org/show_bug.cgi?id=756372",
                  },
                  {
                     name: "HPSBGN03537",
                     refsource: "HP",
                     url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
                  },
                  {
                     name: "77681",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77681",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                  },
                  {
                     name: "GLSA-201701-37",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201701-37",
                  },
                  {
                     name: "openSUSE-SU-2015:2372",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-3",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
                  },
                  {
                     name: "https://support.apple.com/HT206169",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206169",
                  },
                  {
                     name: "https://support.apple.com/HT206166",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206166",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8242",
      datePublished: "2015-12-15T21:00:00",
      dateReserved: "2015-11-18T00:00:00",
      dateUpdated: "2024-08-06T08:13:31.676Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8035

Vulnerability from cvelistv5

Published

2015-11-18 16:00

Modified

2024-08-06 08:06

Severity ?

Summary

The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.

References

▼	URL	Tags
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://support.apple.com/HT206167	x_refsource_CONFIRM
	https://support.apple.com/HT206168	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2015/11/02/2	mailing-list, x_refsource_MLIST
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html	vendor-advisory, x_refsource_FEDORA
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-2812-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2015/11/02/4	mailing-list, x_refsource_MLIST
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html	vendor-advisory, x_refsource_FEDORA
	http://www.openwall.com/lists/oss-security/2015/11/03/1	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/77390	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206169	x_refsource_CONFIRM
	https://support.apple.com/HT206166	x_refsource_CONFIRM
	https://bugzilla.gnome.org/show_bug.cgi?id=757466	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:31.812Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "APPLE-SA-2016-03-21-5",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206167",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206168",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017",
               },
               {
                  name: "[oss-security] 20151102 CVE request: DoS in libxml2 if xz is enabled",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/02/2",
               },
               {
                  name: "APPLE-SA-2016-03-21-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  name: "FEDORA-2016-a9ee80b01d",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "USN-2812-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2812-1",
               },
               {
                  name: "[oss-security] 20151102 Re: CVE request: DoS in libxml2 if xz is enabled",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/02/4",
               },
               {
                  name: "FEDORA-2016-189a7bf68c",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html",
               },
               {
                  name: "[oss-security] 20151103 Re: CVE request: DoS in libxml2 if xz is enabled",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/03/1",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "77390",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77390",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206169",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206166",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.gnome.org/show_bug.cgi?id=757466",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-02T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "APPLE-SA-2016-03-21-5",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206167",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206168",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017",
            },
            {
               name: "[oss-security] 20151102 CVE request: DoS in libxml2 if xz is enabled",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/02/2",
            },
            {
               name: "APPLE-SA-2016-03-21-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               name: "FEDORA-2016-a9ee80b01d",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               name: "APPLE-SA-2016-03-21-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "USN-2812-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2812-1",
            },
            {
               name: "[oss-security] 20151102 Re: CVE request: DoS in libxml2 if xz is enabled",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/02/4",
            },
            {
               name: "FEDORA-2016-189a7bf68c",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html",
            },
            {
               name: "[oss-security] 20151103 Re: CVE request: DoS in libxml2 if xz is enabled",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/03/1",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "77390",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77390",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               name: "APPLE-SA-2016-03-21-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206169",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206166",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.gnome.org/show_bug.cgi?id=757466",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8035",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "APPLE-SA-2016-03-21-5",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
                  },
                  {
                     name: "openSUSE-SU-2016:0106",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
                  },
                  {
                     name: "https://support.apple.com/HT206167",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206167",
                  },
                  {
                     name: "https://support.apple.com/HT206168",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206168",
                  },
                  {
                     name: "DSA-3430",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3430",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017",
                  },
                  {
                     name: "[oss-security] 20151102 CVE request: DoS in libxml2 if xz is enabled",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/02/2",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-1",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
                  },
                  {
                     name: "http://xmlsoft.org/news.html",
                     refsource: "CONFIRM",
                     url: "http://xmlsoft.org/news.html",
                  },
                  {
                     name: "FEDORA-2016-a9ee80b01d",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380",
                  },
                  {
                     name: "RHSA-2016:1089",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-2",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
                  },
                  {
                     name: "1034243",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034243",
                  },
                  {
                     name: "USN-2812-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2812-1",
                  },
                  {
                     name: "[oss-security] 20151102 Re: CVE request: DoS in libxml2 if xz is enabled",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/02/4",
                  },
                  {
                     name: "FEDORA-2016-189a7bf68c",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html",
                  },
                  {
                     name: "[oss-security] 20151103 Re: CVE request: DoS in libxml2 if xz is enabled",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/03/1",
                  },
                  {
                     name: "GLSA-201701-37",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201701-37",
                  },
                  {
                     name: "77390",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77390",
                  },
                  {
                     name: "openSUSE-SU-2015:2372",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-3",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
                  },
                  {
                     name: "https://support.apple.com/HT206169",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206169",
                  },
                  {
                     name: "https://support.apple.com/HT206166",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206166",
                  },
                  {
                     name: "https://bugzilla.gnome.org/show_bug.cgi?id=757466",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.gnome.org/show_bug.cgi?id=757466",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8035",
      datePublished: "2015-11-18T16:00:00",
      dateReserved: "2015-11-02T00:00:00",
      dateUpdated: "2024-08-06T08:06:31.812Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7942

Vulnerability from cvelistv5

Published

2015-11-18 16:00

Modified

2024-08-06 08:06

Severity ?

Summary

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://support.apple.com/HT206167	x_refsource_CONFIRM
	https://support.apple.com/HT206168	x_refsource_CONFIRM
	https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2015/10/22/5	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/79507	vdb-entry, x_refsource_BID
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html	vendor-advisory, x_refsource_FEDORA
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2812-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html	vendor-advisory, x_refsource_FEDORA
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.gnome.org/show_bug.cgi?id=756456	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2015/10/22/8	mailing-list, x_refsource_MLIST
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206169	x_refsource_CONFIRM
	https://support.apple.com/HT206166	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:30.993Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-5",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206167",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206168",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8",
               },
               {
                  name: "[oss-security] 20151022 Crafted xml causes out of bound memory access - Libxml2",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/10/22/5",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  name: "79507",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/79507",
               },
               {
                  name: "APPLE-SA-2016-03-21-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  name: "FEDORA-2016-a9ee80b01d",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  name: "USN-2812-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2812-1",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  name: "FEDORA-2016-189a7bf68c",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.gnome.org/show_bug.cgi?id=756456",
               },
               {
                  name: "[oss-security] 20151022 Re: Crafted xml causes out of bound memory access - Libxml2",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/10/22/8",
               },
               {
                  name: "APPLE-SA-2016-03-21-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206169",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206166",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-22T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "APPLE-SA-2016-03-21-5",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206167",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206168",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8",
            },
            {
               name: "[oss-security] 20151022 Crafted xml causes out of bound memory access - Libxml2",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/10/22/5",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               name: "79507",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/79507",
            },
            {
               name: "APPLE-SA-2016-03-21-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               name: "FEDORA-2016-a9ee80b01d",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "APPLE-SA-2016-03-21-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               name: "USN-2812-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2812-1",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               name: "FEDORA-2016-189a7bf68c",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.gnome.org/show_bug.cgi?id=756456",
            },
            {
               name: "[oss-security] 20151022 Re: Crafted xml causes out of bound memory access - Libxml2",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/10/22/8",
            },
            {
               name: "APPLE-SA-2016-03-21-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206169",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206166",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7942",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2015:2550",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-5",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
                  },
                  {
                     name: "openSUSE-SU-2016:0106",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
                  },
                  {
                     name: "https://support.apple.com/HT206167",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206167",
                  },
                  {
                     name: "https://support.apple.com/HT206168",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206168",
                  },
                  {
                     name: "https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.gnome.org/show_bug.cgi?id=744980#c8",
                  },
                  {
                     name: "[oss-security] 20151022 Crafted xml causes out of bound memory access - Libxml2",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/10/22/5",
                  },
                  {
                     name: "DSA-3430",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3430",
                  },
                  {
                     name: "79507",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/79507",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-1",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
                  },
                  {
                     name: "http://xmlsoft.org/news.html",
                     refsource: "CONFIRM",
                     url: "http://xmlsoft.org/news.html",
                  },
                  {
                     name: "FEDORA-2016-a9ee80b01d",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html",
                  },
                  {
                     name: "RHSA-2016:1089",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-2",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
                  },
                  {
                     name: "1034243",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034243",
                  },
                  {
                     name: "RHSA-2015:2549",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
                  },
                  {
                     name: "USN-2812-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2812-1",
                  },
                  {
                     name: "HPSBGN03537",
                     refsource: "HP",
                     url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
                  },
                  {
                     name: "FEDORA-2016-189a7bf68c",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                  },
                  {
                     name: "GLSA-201701-37",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201701-37",
                  },
                  {
                     name: "openSUSE-SU-2015:2372",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
                  },
                  {
                     name: "https://bugzilla.gnome.org/show_bug.cgi?id=756456",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.gnome.org/show_bug.cgi?id=756456",
                  },
                  {
                     name: "[oss-security] 20151022 Re: Crafted xml causes out of bound memory access - Libxml2",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/10/22/8",
                  },
                  {
                     name: "APPLE-SA-2016-03-21-3",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
                  },
                  {
                     name: "https://support.apple.com/HT206169",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206169",
                  },
                  {
                     name: "https://support.apple.com/HT206166",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206166",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7942",
      datePublished: "2015-11-18T16:00:00",
      dateReserved: "2015-10-22T00:00:00",
      dateUpdated: "2024-08-06T08:06:30.993Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7498

Vulnerability from cvelistv5

Published

2015-12-15 21:00

Modified

2024-08-06 07:51

Severity ?

Summary

Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://git.gnome.org/browse/libxml2/commit/?id=afd27c21f6b36e22682b7da20d726bce2dcb2f43	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1281879	x_refsource_CONFIRM
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2834-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/79548	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:51:28.127Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=afd27c21f6b36e22682b7da20d726bce2dcb2f43",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281879",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "USN-2834-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2834-1",
               },
               {
                  name: "79548",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/79548",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-20T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=afd27c21f6b36e22682b7da20d726bce2dcb2f43",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281879",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "USN-2834-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2834-1",
            },
            {
               name: "79548",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/79548",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-7498",
      datePublished: "2015-12-15T21:00:00",
      dateReserved: "2015-09-29T00:00:00",
      dateUpdated: "2024-08-06T07:51:28.127Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8317

Vulnerability from cvelistv5

Published

2015-12-15 21:00

Modified

2024-08-06 08:13

Severity ?

Summary

The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1281930	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206901	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.gnome.org/show_bug.cgi?id=751603	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=9aa37588ee78a06ca1379a9d9356eab16686099c	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/91826	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-2834-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html	vendor-advisory, x_refsource_APPLE
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	https://blog.fuzzing-project.org/28-Libxml2-Several-out-of-bounds-reads.html	x_refsource_MISC
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f26462a9d8333102e	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/77681	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2015/11/22/3	mailing-list, x_refsource_MLIST
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2015/11/21/1	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	https://support.apple.com/HT206905	x_refsource_CONFIRM
	https://support.apple.com/HT206903	x_refsource_CONFIRM
	https://bugzilla.gnome.org/show_bug.cgi?id=751631	x_refsource_CONFIRM
	https://support.apple.com/HT206902	x_refsource_CONFIRM
	https://support.apple.com/HT206904	x_refsource_CONFIRM
	https://support.apple.com/HT206899	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.133Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281930",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  name: "APPLE-SA-2016-07-18-4",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html",
               },
               {
                  name: "APPLE-SA-2016-07-18-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html",
               },
               {
                  name: "APPLE-SA-2016-07-18-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206901",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.gnome.org/show_bug.cgi?id=751603",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=9aa37588ee78a06ca1379a9d9356eab16686099c",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "91826",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/91826",
               },
               {
                  name: "USN-2834-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2834-1",
               },
               {
                  name: "APPLE-SA-2016-07-18-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html",
               },
               {
                  name: "APPLE-SA-2016-07-18-6",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://blog.fuzzing-project.org/28-Libxml2-Several-out-of-bounds-reads.html",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f26462a9d8333102e",
               },
               {
                  name: "77681",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77681",
               },
               {
                  name: "[oss-security] 20151122 Re: Libxml2: Several out of bounds reads",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/22/3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
               },
               {
                  name: "[oss-security] 20151121 Libxml2: Several out of bounds reads",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/11/21/1",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206905",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206903",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.gnome.org/show_bug.cgi?id=751631",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206902",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206904",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206899",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-20T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281930",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               name: "APPLE-SA-2016-07-18-4",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html",
            },
            {
               name: "APPLE-SA-2016-07-18-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html",
            },
            {
               name: "APPLE-SA-2016-07-18-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206901",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.gnome.org/show_bug.cgi?id=751603",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=9aa37588ee78a06ca1379a9d9356eab16686099c",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "91826",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/91826",
            },
            {
               name: "USN-2834-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2834-1",
            },
            {
               name: "APPLE-SA-2016-07-18-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html",
            },
            {
               name: "APPLE-SA-2016-07-18-6",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://blog.fuzzing-project.org/28-Libxml2-Several-out-of-bounds-reads.html",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f26462a9d8333102e",
            },
            {
               name: "77681",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77681",
            },
            {
               name: "[oss-security] 20151122 Re: Libxml2: Several out of bounds reads",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/22/3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
            },
            {
               name: "[oss-security] 20151121 Libxml2: Several out of bounds reads",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/11/21/1",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206905",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206903",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.gnome.org/show_bug.cgi?id=751631",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206902",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206904",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206899",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8317",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "openSUSE-SU-2016:0106",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1281930",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281930",
                  },
                  {
                     name: "DSA-3430",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3430",
                  },
                  {
                     name: "APPLE-SA-2016-07-18-4",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html",
                  },
                  {
                     name: "APPLE-SA-2016-07-18-3",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html",
                  },
                  {
                     name: "APPLE-SA-2016-07-18-2",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html",
                  },
                  {
                     name: "https://support.apple.com/HT206901",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206901",
                  },
                  {
                     name: "RHSA-2016:1089",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
                  },
                  {
                     name: "https://bugzilla.gnome.org/show_bug.cgi?id=751603",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.gnome.org/show_bug.cgi?id=751603",
                  },
                  {
                     name: "https://git.gnome.org/browse/libxml2/commit/?id=9aa37588ee78a06ca1379a9d9356eab16686099c",
                     refsource: "CONFIRM",
                     url: "https://git.gnome.org/browse/libxml2/commit/?id=9aa37588ee78a06ca1379a9d9356eab16686099c",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                  },
                  {
                     name: "91826",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/91826",
                  },
                  {
                     name: "USN-2834-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2834-1",
                  },
                  {
                     name: "APPLE-SA-2016-07-18-1",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html",
                  },
                  {
                     name: "APPLE-SA-2016-07-18-6",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html",
                  },
                  {
                     name: "1034243",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034243",
                  },
                  {
                     name: "RHSA-2015:2549",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
                  },
                  {
                     name: "https://blog.fuzzing-project.org/28-Libxml2-Several-out-of-bounds-reads.html",
                     refsource: "MISC",
                     url: "https://blog.fuzzing-project.org/28-Libxml2-Several-out-of-bounds-reads.html",
                  },
                  {
                     name: "HPSBGN03537",
                     refsource: "HP",
                     url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
                  },
                  {
                     name: "https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f26462a9d8333102e",
                     refsource: "CONFIRM",
                     url: "https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f26462a9d8333102e",
                  },
                  {
                     name: "77681",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77681",
                  },
                  {
                     name: "[oss-security] 20151122 Re: Libxml2: Several out of bounds reads",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/22/3",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                  },
                  {
                     name: "[oss-security] 20151121 Libxml2: Several out of bounds reads",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/11/21/1",
                  },
                  {
                     name: "openSUSE-SU-2015:2372",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
                  },
                  {
                     name: "https://support.apple.com/HT206905",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206905",
                  },
                  {
                     name: "https://support.apple.com/HT206903",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206903",
                  },
                  {
                     name: "https://bugzilla.gnome.org/show_bug.cgi?id=751631",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.gnome.org/show_bug.cgi?id=751631",
                  },
                  {
                     name: "https://support.apple.com/HT206902",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206902",
                  },
                  {
                     name: "https://support.apple.com/HT206904",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206904",
                  },
                  {
                     name: "https://support.apple.com/HT206899",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT206899",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8317",
      datePublished: "2015-12-15T21:00:00",
      dateReserved: "2015-11-22T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.133Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7499

Vulnerability from cvelistv5

Published

2015-12-15 21:00

Modified

2024-08-06 07:51

Severity ?

Summary

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://support.apple.com/HT206167	x_refsource_CONFIRM
	https://support.apple.com/HT206168	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=35bcb1d758ed70aa7b257c9c3b3ff55e54e3d0da	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	https://git.gnome.org/browse/libxml2/commit/?id=28cd9cb747a94483f4aea7f0968d202c20bb4cfc	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2834-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1281925	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://www.securityfocus.com/bid/79509	vdb-entry, x_refsource_BID
	https://support.apple.com/HT206169	x_refsource_CONFIRM
	https://support.apple.com/HT206166	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:51:27.969Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-5",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206167",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206168",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  name: "APPLE-SA-2016-03-21-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=35bcb1d758ed70aa7b257c9c3b3ff55e54e3d0da",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=28cd9cb747a94483f4aea7f0968d202c20bb4cfc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
               },
               {
                  name: "USN-2834-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2834-1",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281925",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
               },
               {
                  name: "79509",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/79509",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206169",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206166",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-20T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "APPLE-SA-2016-03-21-5",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206167",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206168",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               name: "APPLE-SA-2016-03-21-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=35bcb1d758ed70aa7b257c9c3b3ff55e54e3d0da",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=28cd9cb747a94483f4aea7f0968d202c20bb4cfc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "APPLE-SA-2016-03-21-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
            },
            {
               name: "USN-2834-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2834-1",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281925",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               name: "APPLE-SA-2016-03-21-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
            },
            {
               name: "79509",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/79509",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206169",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206166",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-7499",
      datePublished: "2015-12-15T21:00:00",
      dateReserved: "2015-09-29T00:00:00",
      dateUpdated: "2024-08-06T07:51:27.969Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7500

Vulnerability from cvelistv5

Published

2015-12-15 21:00

Modified

2024-08-06 07:51

Severity ?

Summary

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://support.apple.com/HT206167	x_refsource_CONFIRM
	https://support.apple.com/HT206168	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=f1063fdbe7fa66332bbb76874101c2a7b51b519f	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2834-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1281943	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/79562	vdb-entry, x_refsource_BID
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206169	x_refsource_CONFIRM
	https://support.apple.com/HT206166	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:51:28.191Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-5",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206167",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206168",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  name: "APPLE-SA-2016-03-21-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=f1063fdbe7fa66332bbb76874101c2a7b51b519f",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
               },
               {
                  name: "USN-2834-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2834-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281943",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  name: "79562",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/79562",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206169",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206166",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-20T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "APPLE-SA-2016-03-21-5",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206167",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206168",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               name: "APPLE-SA-2016-03-21-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=f1063fdbe7fa66332bbb76874101c2a7b51b519f",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "APPLE-SA-2016-03-21-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
            },
            {
               name: "USN-2834-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2834-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281943",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               name: "79562",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/79562",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               name: "APPLE-SA-2016-03-21-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206169",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206166",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-7500",
      datePublished: "2015-12-15T21:00:00",
      dateReserved: "2015-09-29T00:00:00",
      dateUpdated: "2024-08-06T07:51:28.191Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7941

Vulnerability from cvelistv5

Published

2015-11-18 16:00

Modified

2024-08-06 08:06

Severity ?

Summary

libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/74241	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2015/10/22/5	mailing-list, x_refsource_MLIST
	https://git.gnome.org/browse/libxml2/commit/?id=9b8512337d14c8ddf662fcb98b0135f225a1c489	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.gnome.org/show_bug.cgi?id=744980	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2812-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html	vendor-advisory, x_refsource_FEDORA
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2015/10/22/8	mailing-list, x_refsource_MLIST
	https://git.gnome.org/browse/libxml2/commit/?id=a7dfab7411cbf545f359dd3157e5df1eb0e7ce31	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:31.043Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "74241",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/74241",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  name: "[oss-security] 20151022 Crafted xml causes out of bound memory access - Libxml2",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/10/22/5",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=9b8512337d14c8ddf662fcb98b0135f225a1c489",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  name: "FEDORA-2016-a9ee80b01d",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.gnome.org/show_bug.cgi?id=744980",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  name: "USN-2812-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2812-1",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  name: "FEDORA-2016-189a7bf68c",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  name: "[oss-security] 20151022 Re: Crafted xml causes out of bound memory access - Libxml2",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2015/10/22/8",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=a7dfab7411cbf545f359dd3157e5df1eb0e7ce31",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-22T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "74241",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/74241",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               name: "[oss-security] 20151022 Crafted xml causes out of bound memory access - Libxml2",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/10/22/5",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=9b8512337d14c8ddf662fcb98b0135f225a1c489",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               name: "FEDORA-2016-a9ee80b01d",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.gnome.org/show_bug.cgi?id=744980",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               name: "USN-2812-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2812-1",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               name: "FEDORA-2016-189a7bf68c",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               name: "[oss-security] 20151022 Re: Crafted xml causes out of bound memory access - Libxml2",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2015/10/22/8",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=a7dfab7411cbf545f359dd3157e5df1eb0e7ce31",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7941",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2015:2550",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
                  },
                  {
                     name: "74241",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/74241",
                  },
                  {
                     name: "openSUSE-SU-2016:0106",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
                  },
                  {
                     name: "[oss-security] 20151022 Crafted xml causes out of bound memory access - Libxml2",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/10/22/5",
                  },
                  {
                     name: "https://git.gnome.org/browse/libxml2/commit/?id=9b8512337d14c8ddf662fcb98b0135f225a1c489",
                     refsource: "CONFIRM",
                     url: "https://git.gnome.org/browse/libxml2/commit/?id=9b8512337d14c8ddf662fcb98b0135f225a1c489",
                  },
                  {
                     name: "DSA-3430",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3430",
                  },
                  {
                     name: "http://xmlsoft.org/news.html",
                     refsource: "CONFIRM",
                     url: "http://xmlsoft.org/news.html",
                  },
                  {
                     name: "FEDORA-2016-a9ee80b01d",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html",
                  },
                  {
                     name: "https://bugzilla.gnome.org/show_bug.cgi?id=744980",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.gnome.org/show_bug.cgi?id=744980",
                  },
                  {
                     name: "RHSA-2016:1089",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                  },
                  {
                     name: "1034243",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034243",
                  },
                  {
                     name: "RHSA-2015:2549",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
                  },
                  {
                     name: "USN-2812-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2812-1",
                  },
                  {
                     name: "HPSBGN03537",
                     refsource: "HP",
                     url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
                  },
                  {
                     name: "FEDORA-2016-189a7bf68c",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                  },
                  {
                     name: "GLSA-201701-37",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201701-37",
                  },
                  {
                     name: "openSUSE-SU-2015:2372",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
                  },
                  {
                     name: "[oss-security] 20151022 Re: Crafted xml causes out of bound memory access - Libxml2",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2015/10/22/8",
                  },
                  {
                     name: "https://git.gnome.org/browse/libxml2/commit/?id=a7dfab7411cbf545f359dd3157e5df1eb0e7ce31",
                     refsource: "CONFIRM",
                     url: "https://git.gnome.org/browse/libxml2/commit/?id=a7dfab7411cbf545f359dd3157e5df1eb0e7ce31",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7941",
      datePublished: "2015-11-18T16:00:00",
      dateReserved: "2015-10-22T00:00:00",
      dateUpdated: "2024-08-06T08:06:31.043Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7497

Vulnerability from cvelistv5

Published

2015-12-15 21:00

Modified

2024-08-06 07:51

Severity ?

Summary

Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1281862	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/79508	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	https://git.gnome.org/browse/libxml2/commit/?id=6360a31a84efe69d155ed96306b9a931a40beab9	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2834-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:51:28.144Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281862",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  name: "79508",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/79508",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=6360a31a84efe69d155ed96306b9a931a40beab9",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "USN-2834-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2834-1",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-20T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1281862",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               name: "79508",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/79508",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=6360a31a84efe69d155ed96306b9a931a40beab9",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "USN-2834-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2834-1",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-7497",
      datePublished: "2015-12-15T21:00:00",
      dateReserved: "2015-09-29T00:00:00",
      dateUpdated: "2024-08-06T07:51:28.144Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-1819

Vulnerability from cvelistv5

Published

2015-08-14 18:00

Modified

2024-08-06 04:54

Severity ?

Summary

The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://support.apple.com/HT206167	x_refsource_CONFIRM
	https://support.apple.com/HT206168	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172943.html	vendor-advisory, x_refsource_FEDORA
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201507-08	vendor-advisory, x_refsource_GENTOO
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.securityfocus.com/bid/75570	vdb-entry, x_refsource_BID
	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172710.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-2812-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2015-1419.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	https://git.gnome.org/browse/libxml2/commit/?id=213f1fe0d76d30eaed6e5853057defc43e6df2c9	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206169	x_refsource_CONFIRM
	https://support.apple.com/HT206166	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T04:54:16.300Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-5",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206167",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206168",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  name: "FEDORA-2015-037f844d3e",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172943.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "GLSA-201507-08",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201507-08",
               },
               {
                  name: "APPLE-SA-2016-03-21-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
               },
               {
                  name: "75570",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/75570",
               },
               {
                  name: "FEDORA-2015-c24af963a2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172710.html",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "USN-2812-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2812-1",
               },
               {
                  name: "RHSA-2015:1419",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-1419.html",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=213f1fe0d76d30eaed6e5853057defc43e6df2c9",
               },
               {
                  name: "APPLE-SA-2016-03-21-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206169",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206166",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-04-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "APPLE-SA-2016-03-21-5",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206167",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206168",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               name: "FEDORA-2015-037f844d3e",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172943.html",
            },
            {
               name: "APPLE-SA-2016-03-21-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "GLSA-201507-08",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201507-08",
            },
            {
               name: "APPLE-SA-2016-03-21-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
            },
            {
               name: "75570",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/75570",
            },
            {
               name: "FEDORA-2015-c24af963a2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172710.html",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "USN-2812-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2812-1",
            },
            {
               name: "RHSA-2015:1419",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-1419.html",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=213f1fe0d76d30eaed6e5853057defc43e6df2c9",
            },
            {
               name: "APPLE-SA-2016-03-21-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206169",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206166",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-1819",
      datePublished: "2015-08-14T18:00:00",
      dateReserved: "2015-02-17T00:00:00",
      dateUpdated: "2024-08-06T04:54:16.300Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-5312

Vulnerability from cvelistv5

Published

2015-12-15 21:00

Modified

2024-08-06 06:41

Severity ?

Summary

The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-2550.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://support.apple.com/HT206167	x_refsource_CONFIRM
	https://support.apple.com/HT206168	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3430	vendor-advisory, x_refsource_DEBIAN
	https://git.gnome.org/browse/libxml2/commit/?id=69030714cde66d525a8884bda01b9e8f0abf8e1e	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1276693	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1089.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2834-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id/1034243	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-2549.html	vendor-advisory, x_refsource_REDHAT
	http://marc.info/?l=bugtraq&m=145382616617563&w=2	vendor-advisory, x_refsource_HP
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html	vendor-advisory, x_refsource_SUSE
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206169	x_refsource_CONFIRM
	https://support.apple.com/HT206166	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/79536	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T06:41:09.539Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:2550",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-5",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
               },
               {
                  name: "openSUSE-SU-2016:0106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206167",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206168",
               },
               {
                  name: "DSA-3430",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3430",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.gnome.org/browse/libxml2/commit/?id=69030714cde66d525a8884bda01b9e8f0abf8e1e",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1276693",
               },
               {
                  name: "APPLE-SA-2016-03-21-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://xmlsoft.org/news.html",
               },
               {
                  name: "RHSA-2016:1089",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
               },
               {
                  name: "USN-2834-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2834-1",
               },
               {
                  name: "1034243",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034243",
               },
               {
                  name: "RHSA-2015:2549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
               },
               {
                  name: "HPSBGN03537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "openSUSE-SU-2015:2372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
               },
               {
                  name: "APPLE-SA-2016-03-21-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206169",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT206166",
               },
               {
                  name: "79536",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/79536",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-11-20T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-13T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2015:2550",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2550.html",
            },
            {
               name: "APPLE-SA-2016-03-21-5",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",
            },
            {
               name: "openSUSE-SU-2016:0106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206167",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206168",
            },
            {
               name: "DSA-3430",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3430",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.gnome.org/browse/libxml2/commit/?id=69030714cde66d525a8884bda01b9e8f0abf8e1e",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1276693",
            },
            {
               name: "APPLE-SA-2016-03-21-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://xmlsoft.org/news.html",
            },
            {
               name: "RHSA-2016:1089",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1089.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               name: "APPLE-SA-2016-03-21-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html",
            },
            {
               name: "USN-2834-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2834-1",
            },
            {
               name: "1034243",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034243",
            },
            {
               name: "RHSA-2015:2549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2549.html",
            },
            {
               name: "HPSBGN03537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145382616617563&w=2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "openSUSE-SU-2015:2372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html",
            },
            {
               name: "APPLE-SA-2016-03-21-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206169",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT206166",
            },
            {
               name: "79536",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/79536",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-5312",
      datePublished: "2015-12-15T21:00:00",
      dateReserved: "2015-07-01T00:00:00",
      dateUpdated: "2024-08-06T06:41:09.539Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature