CVE-2015-7942

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows…

published November 18, 2015

CVSS
—
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04720 · 91.8th percentile
Published
2015-11-18T16:00Z
EPSS history
Timeline
  • 18 NOV 16:00Z
    The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows…
    cvelistv5