Total vulnerabilities in the database
The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.
| Software | From | Fixed in |
|---|---|---|
| hp / icewall_file_manager | 3.0 | 3.0.x |
| hp / icewall_federation_agent | 3.0 | 3.0.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 7.0 | 7.0.x |
| apple / watchos | - | 2.1.x |
| apple / iphone_os | - | 9.2.1.x |
| apple / mac_os_x | - | 10.11.3.x |
| apple / tvos | - | 9.1.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| canonical / ubuntu_linux | 15.10 | 15.10.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 15.04 | 15.04.x |
| xmlsoft / libxml2 | 2.9.2 | 2.9.2.x |