CVE-2015-7500: Buffer Overflow
A heap-based buffer overflow read in xmlParseMisc was found.
Upstream bug:
https://bugzilla.gnome.org/showbug.cgi?id=756525
Other sources
The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7500?
CVE-2015-7500 is classified as a denial of service vulnerability due to out-of-bounds heap read.
How do I fix CVE-2015-7500?
To mitigate CVE-2015-7500, update libxml2 to version 2.9.3 or later.
Which software versions are affected by CVE-2015-7500?
CVE-2015-7500 affects libxml2 versions prior to 2.9.3 and various HP IceWall products.
What kind of attack can CVE-2015-7500 facilitate?
CVE-2015-7500 can allow attackers to cause a denial of service through carefully crafted XML input.
Is CVE-2015-7500 a remotely exploitable vulnerability?
CVE-2015-7500 can be exploited by context-dependent attackers leveraging specific XML parsing conditions.