A denial of service flaw was found in the way the libxml2 library parsed certain XML files. An attacker could provide a specially crafted XML file that, when parsed by an application using libxml2, could cause that application to use an excessive amount of memory.

The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941 .

libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.

A heap-based buffer overflow vulnerability was found in xmlDictComputeFastQKey in dict.c.

A heap-based buffer overflow read in xmlParseMisc was found.

A heap-based buffer overflow was found in xmlGROW allowing the attacker to read the memory out of bounds.

A buffer overread in xmlNextChar was found, causing segmentation fault when compiled with ASAN.

Heap-based buffer overflow was found in xmlParseXmlDecl. When conversion failure happens, parser continues to extract more errors which may lead to unexpected behaviour.

Stack-based buffer overread vulnerability with HTML parser in push mode in xmlSAX2TextNode causing segmentation fault when compiled with ASAN.

A vulnerability in libxml2 was found causing DoS by exhausting CPU when parsing specially crafted XML document.

An out-of-bounds heap read in xmlParseXMLDecl happens when a file containing unfinished xml declaration.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1391 advisory.

    This advisory aggregates security fixes for the libxml2 SRPM in CIQ LTS 9.6. It addresses 39 CVEs:
    CVE-2010-4494, CVE-2009-2414, CVE-2015-7498, CVE-2022-40304, CVE-2024-25062, and 34 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows     context-dependent attackers to cause a denial of service via unspecified vectors. (CVE-2015-7497)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-924:01 advisory.

    This library allows to manipulate XML files. It includes support     to read, modify and write XML and HTML files. There is DTDs support     this includes parsing and validation even with complex DtDs, either     at parse time or later once the document has been modified. The output     can be a simple SAX stream or and in-memory DOM like representations.
    In this case one can use the built-in XPath and XPointer implementation     to select sub nodes or ranges. A flexible Input/Output mechanism is     available, with existing HTTP and FTP modules and combined to an     URI library.
    Security issues fixed with this release:
    CVE-2015-1819     The xmlreader in libxml allows remote attackers to cause a denial of     service (memory consumption) via crafted XML data, related to an XML     Entity Expansion (XEE) attack.
    CVE-2015-5312
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-7497
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-7498
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-7499
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-7500
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-7941     libxml2 2.9.2 does not properly stop parsing invalid input, which     allows context-dependent attackers to cause a denial of service     (out-of-bounds read and libxml2 crash) via crafted XML data to the (1)     xmlParseEntityDecl or (2) xmlParseConditionalSections function in     parser.c, as demonstrated by non-terminated entities.
    CVE-2015-7942     The xmlParseConditionalSections function in parser.c in libxml2 does     not properly skip intermediary entities when it stops parsing invalid     input, which allows context-dependent attackers to cause a denial of     service (out-of-bounds read and crash) via crafted XML data, a     different vulnerability than CVE-2015-7941.
    CVE-2015-8241
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-8242
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-8317
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CVE-2015-5312 The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.

CVE-2015-7497 Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.

CVE-2015-7498 Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

CVE-2015-7499 Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

CVE-2015-7500 The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

CVE-2015-7941 libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.

CVE-2015-7942 The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.

CVE-2015-8241 The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

CVE-2015-8242 The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

CVE-2015-8317 The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.

This update fixes the following security issues :

  - CVE-2015-1819 Enforce the reader to run in constant     memory [bnc#928193]

  - CVE-2015-7941 Fix out of bound read with crafted xml     input by stopping parsing on entities boundaries errors     [bnc#951734]

  - CVE-2015-7942 Fix another variation of overflow in     Conditional sections [bnc#951735]

  - CVE-2015-8241 Avoid extra processing of MarkupDecl when     EOF [bnc#956018]

  - CVE-2015-8242 Buffer overead with HTML parser in push     mode [bnc#956021]

  - CVE-2015-8317 Return if the encoding declaration is     broken or encoding conversion failed [bnc#956260]

  - CVE-2015-5312 Fix another entity expansion issue     [bnc#957105]

  - CVE-2015-7497 Avoid an heap buffer overflow in     xmlDictComputeFastQKey [bnc#957106]

  - CVE-2015-7498 Processes entities after encoding     conversion failures [bnc#957107]

  - CVE-2015-7499 Add xmlHaltParser() to stop the parser /     Detect incoherency on GROW [bnc#957109]

  - CVE-2015-7500 Fix memory access error due to incorrect     entities boundaries [bnc#957110]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several denial of service flaws were found in libxml2, a library providing support for reading, modifying, and writing XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or in certain cases crash the application.
(CVE-2015-1819, CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500 CVE-2015-7941, CVE-2015-7942, CVE-2015-8241, CVE-2015-8242, CVE-2015-8317, BZ#1213957, BZ#1281955)

The desktop must be restarted (log out, then log back in) for this update to take effect.

Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or crash the application.

Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to use an excessive amount of CPU, leak potentially sensitive information, or crash the application.

CVE-2015-5312: CPU exhaustion when processing specially crafted XML input. CVE-2015-7497: Heap-based buffer overflow in xmlDictComputeFastQKey. CVE-2015-7498: Heap-based buffer overflow in xmlParseXmlDecl. CVE-2015-7499: Heap-based buffer overflow in xmlGROW.
CVE-2015-7500: Heap buffer overflow in xmlParseMisc.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- security update: This update fixes the following     security issues :

  - CVE-2015-1819 Enforce the reader to run in constant     memory [bnc#928193]

  - CVE-2015-7941 Fix out of bound read with crafted xml     input by stopping parsing on entities boundaries errors     [bnc#951734]

  - CVE-2015-7942 Fix another variation of overflow in     Conditional sections [bnc#951735]

  - CVE-2015-8241 Avoid extra processing of MarkupDecl when     EOF [bnc#956018]

  - CVE-2015-8242 Buffer overead with HTML parser in push     mode [bnc#956021]

  - CVE-2015-8317 Return if the encoding declaration is     broken or encoding conversion failed [bnc#956260]

  - CVE-2015-5312 Fix another entity expansion issue     [bnc#957105]

  - CVE-2015-7497 Avoid an heap buffer overflow in     xmlDictComputeFastQKey [bnc#957106]

  - CVE-2015-7498 Processes entities after encoding     conversion failures [bnc#957107]

  - CVE-2015-7499 Add xmlHaltParser() to stop the parser /     Detect incoherency on GROW [bnc#957109]

  - CVE-2015-8317 Multiple out-of-bound read could lead to     denial of service [bnc#956260]

  - CVE-2015-8035 DoS when parsing specially crafted XML     document if XZ support is enabled [bnc#954429]

  - CVE-2015-7500 Fix memory access error due to incorrect     entities boundaries [bnc#957110]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201701-37 (libxml2: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libxml2. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user or automated system to process a       specially crafted XML document, possibly resulting in execution of       arbitrary code with the privileges of the process or a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
87354	Amazon Linux AMI : libxml2 (ALAS-2015-628)	Nessus	Amazon Linux Local Security Checks	2015/12/15	2018/4/18	high
354769	Rocky Linux 9.6 [CIQ] Security Update: libxml2 / libxml2-devel / python3-libxml2 Multiple Vulnerabilities (ciqsa-2026_1391)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	2023/6/30	2023/7/6	critical
218735	Linux Distros Unpatched Vulnerability : CVE-2015-7497	Nessus	Misc.	2025/3/4	2026/9/2	critical
291552	MiracleLinux 7 : libxml2-2.9.1-6.0.1.el7.AXS7.2 (AXSA:2015-924:01)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	critical
88742	F5 Networks BIG-IP : Multiple libXML2 vulnerabilities (K61570943)	Nessus	F5 Networks Local Security Checks	2016/2/16	2021/3/10	high
87862	SUSE SLED11 / SLES11 Security Update : libxml2 (SUSE-SU-2016:0030-1)	Nessus	SuSE Local Security Checks	2016/1/12	2021/1/6	high
87581	Scientific Linux Security Update : libxml2 on SL7.x x86_64 (20151207)	Nessus	Scientific Linux Local Security Checks	2015/12/22	2021/1/14	high
87608	Debian DSA-3430-1 : libxml2 - security update	Nessus	Debian Local Security Checks	2015/12/29	2021/1/11	critical
87605	Debian DLA-373-1 : libxml2 security update	Nessus	Debian Local Security Checks	2015/12/29	2021/1/11	high
87865	SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2016:0049-1)	Nessus	SuSE Local Security Checks	2016/1/12	2021/1/6	high
96541	GLSA-201701-37 : libxml2: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/1/17	2026/1/5	critical

检测

插件搜索

high

critical

critical

critical

critical

high

high

high

critical

high

high

critical