// For flags

CVE-2015-8035

libxml2: DoS caused by incorrect error detection during XZ decompression

Severity Score

10.0
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.

La función xz_decomp en xzlib.c en libxml2 2.9.1 no detecta adecuadamente los errores de compresión, lo que permite a atacantes dependientes del contexto causar una denegación de servicio (cuelgue del proceso) a través de datos XML manipulados.

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.

Florian Weimer discovered that libxml2 incorrectly handled certain XML data. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause resource consumption, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 15.04. Michal Zalewski discovered that libxml2 incorrectly handled certain XML data. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 15.04. Various other issues were also addressed.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
High
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-11-02 CVE Reserved
  • 2015-11-17 CVE Published
  • 2024-08-06 CVE Updated
  • 2024-08-06 First Exploit
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-252: Unchecked Return Value
  • CWE-399: Resource Management Errors
CAPEC
References (27)
URL Tag Source
http://www.openwall.com/lists/oss-security/2015/11/02/2 Mailing List
http://www.openwall.com/lists/oss-security/2015/11/02/4 Mailing List
http://www.openwall.com/lists/oss-security/2015/11/03/1 Mailing List
http://www.securityfocus.com/bid/77390 Vdb Entry
http://www.securitytracker.com/id/1034243 Vdb Entry
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 X_refsource_confirm
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 X_refsource_confirm
https://support.apple.com/HT206166 X_refsource_confirm
https://support.apple.com/HT206167 X_refsource_confirm
https://support.apple.com/HT206168 X_refsource_confirm
https://support.apple.com/HT206169 X_refsource_confirm
URL Date SRC
https://bugzilla.gnome.org/show_bug.cgi?id=757466 2024-08-06
URL Date SRC
URL Date SRC
http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html 2019-03-08
http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html 2019-03-08
http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html 2019-03-08
http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html 2019-03-08
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html 2019-03-08
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html 2019-03-08
http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html 2019-03-08
http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html 2019-03-08
http://rhn.redhat.com/errata/RHSA-2016-1089.html 2019-03-08
http://www.debian.org/security/2015/dsa-3430 2019-03-08
http://www.ubuntu.com/usn/USN-2812-1 2019-03-08
http://xmlsoft.org/news.html 2019-03-08
https://security.gentoo.org/glsa/201701-37 2019-03-08
https://access.redhat.com/security/cve/CVE-2015-8035 2020-03-31
https://bugzilla.redhat.com/show_bug.cgi?id=1277146 2020-03-31
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 7.0
Search vendor "Debian" for product "Debian Linux" and version "7.0"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 8.0
Search vendor "Debian" for product "Debian Linux" and version "8.0"
-
Affected
Xmlsoft
Search vendor "Xmlsoft"
 Libxml2
Search vendor "Xmlsoft" for product "Libxml2"
 2.9.1
Search vendor "Xmlsoft" for product "Libxml2" and version "2.9.1"
-
Affected
Apple
Search vendor "Apple"
 Iphone Os
Search vendor "Apple" for product "Iphone Os"
 <= 9.2.1
Search vendor "Apple" for product "Iphone Os" and version " <= 9.2.1"
-
Affected
Apple
Search vendor "Apple"
 Mac Os X
Search vendor "Apple" for product "Mac Os X"
 <= 10.11.3
Search vendor "Apple" for product "Mac Os X" and version " <= 10.11.3"
-
Affected
Apple
Search vendor "Apple"
 Tvos
Search vendor "Apple" for product "Tvos"
 <= 9.1
Search vendor "Apple" for product "Tvos" and version " <= 9.1"
-
Affected
Apple
Search vendor "Apple"
 Watchos
Search vendor "Apple" for product "Watchos"
 <= 2.1
Search vendor "Apple" for product "Watchos" and version " <= 2.1"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 14.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04"
lts
Affected