CVE-2015-7500 (Medium) detected in libxml2-v2.9.2

[mend-bolt-for-github]

CVE-2015-7500 - Medium Severity Vulnerability

Vulnerable Library - libxml2v2.9.2

XML parser and markup toolkit

Library home page: https://github.com/GNOME/libxml2.git

Found in HEAD commit: e2ecf13c97834779d16859ebddc92a6dcdcb193f

Library Source Files (1)

* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.

• /demo/parser.c

Vulnerability Details

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

Publish Date: 2015-12-15

URL: CVE-2015-7500

CVSS 2 Score Details (5.0)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2015-7500

Release Date: 2015-12-15

Fix Resolution: 2.9.3

---

Step up your Open Source Security Game with WhiteSource here