CVE-2015-8710: Buffer Overflow
The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8710?
CVE-2015-8710 is classified as a medium severity vulnerability due to its potential for sensitive information disclosure and denial of service.
How do I fix CVE-2015-8710?
To fix CVE-2015-8710, update libxml2 to version 2.9.3 or later to address the underlying issues.
What applications are affected by CVE-2015-8710?
CVE-2015-8710 affects libxml2 versions prior to 2.9.3 and specific versions of Debian Linux including 7.0, 8.0, and 9.0.
What types of attacks are possible with CVE-2015-8710?
CVE-2015-8710 can be exploited to obtain sensitive information, cause a denial of service, or potentially trigger other unspecified impacts.
Is there a workaround for CVE-2015-8710?
While the best mitigation for CVE-2015-8710 is updating the software, temporary workarounds may include restricting access to the affected applications.