Stack-based buffer overflow in Libxml2 - CVE-2015-8242
Published: December 15, 2015 / Updated: July 28, 2020
Vulnerability identifier: #VU32382
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-8242
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser when processing crafted XML data. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
Libxml2
Amazon Linux AMI
Fedora
libxml2 (Alpine package)
libxml2
Amazon Linux AMI
Fedora
libxml2 (Alpine package)
libxml2
How to mitigate CVE-2015-8242
Update to version 2.9.3.
Libxml2 - update to 2.9.3
libxml2 (Alpine package) - addressed in versions 2.9.1-r3, 2.9.1-r4
libxml2 - addressed in versions 2.9.3-1.fc22, 2.9.3-1.fc23
libxml2 (Alpine package) - addressed in versions 2.9.1-r3, 2.9.1-r4
libxml2 - addressed in versions 2.9.3-1.fc22, 2.9.3-1.fc23
External References
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
- http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html
- http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html
- http://marc.info/?l=bugtraq&m=145382616617563&w=2
- http://rhn.redhat.com/errata/RHSA-2015-2549.html
- http://rhn.redhat.com/errata/RHSA-2015-2550.html
- http://rhn.redhat.com/errata/RHSA-2016-1089.html
- http://www.openwall.com/lists/oss-security/2015/11/17/5
- http://www.openwall.com/lists/oss-security/2015/11/18/23
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/77681
- http://www.securitytracker.com/id/1034243
- http://www.ubuntu.com/usn/USN-2834-1
- http://xmlsoft.org/news.html
- https://bugzilla.gnome.org/show_bug.cgi?id=756372
- https://bugzilla.redhat.com/show_bug.cgi?id=1281950
- https://git.gnome.org/browse/libxml2/commit/?id=8fb4a770075628d6441fb17a1e435100e2f3b1a2
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944172
- https://security.gentoo.org/glsa/201701-37
- https://support.apple.com/HT206166
- https://support.apple.com/HT206167
- https://support.apple.com/HT206168
- https://support.apple.com/HT206169