CVE-2015-1819

Debian Linux < 5.0 - Resource Management Error

Title source: rule
STIX 2.1

Description

The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

References (24)

Core 24
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-2550.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html
Third Party Advisory x_refsource_confirm
https://support.apple.com/HT206167
Third Party Advisory x_refsource_confirm
https://support.apple.com/HT206168
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2015/dsa-3430
Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172943.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
Third Party Advisory x_refsource_confirm
http://xmlsoft.org/news.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201507-08
Mailing List, Third Party Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/75570
Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172710.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034243
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2812-1
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-1419.html
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201701-37
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
Third Party Advisory x_refsource_confirm
https://support.apple.com/HT206169
Third Party Advisory x_refsource_confirm
https://support.apple.com/HT206166

Scores

EPSS 0.0204
EPSS Percentile 84.1%

Details

CWE
CWE-399
Status published
Products (18)
apple/iphone_os < 9.2.1
apple/mac_os_x < 10.11.3
apple/tvos < 9.1
apple/watchos < 2.1
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 15.04
debian/debian_linux 7.0
debian/debian_linux 8.0
fedoraproject/fedora 22
... and 8 more
Published Aug 14, 2015
Tracked Since Feb 18, 2026