USN-2834-1

Dashboard / Vulnerabilities / USN-2834-1

USN-2834-1

Summary: libxml2 vulnerabilities

Details: Kostya Serebryany discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. (CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-7499,CVE-2015-7500) Hugh Davenport discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. (CVE-2015-8241, CVE-2015-8242) Hanno Boeck discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-8317)

References: https://ubuntu.com/security/notices/USN-2834-1, https://ubuntu.com/security/CVE-2015-5312, https://ubuntu.com/security/CVE-2015-7497, https://ubuntu.com/security/CVE-2015-7498, https://ubuntu.com/security/CVE-2015-7499, https://ubuntu.com/security/CVE-2015-7500, https://ubuntu.com/security/CVE-2015-8241, https://ubuntu.com/security/CVE-2015-8242, https://ubuntu.com/security/CVE-2015-8317