CVE-2015-8317
medium
HPE CVSS v3 Base Score
5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS Score
0.3%
Exploitation probability in 30 days
Top 47% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
None
Availability
None
Vulnerability Report
Generated by CyberWatcher
Description
The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.
CWE
CWE-119Affected Products
debian debian linuxcanonical ubuntu linuxxmlsoft libxml2redhat enterprise linux desktopredhat enterprise linux hpc noderedhat enterprise linux serverredhat enterprise linux workstationhp icewall federation agenthp icewall file manager