The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libxml2-staticUpgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2-debuginfoUpgrade libxml2 | Jul 23, 2020 | Nov 18, 2015 |
| Amazon_linux | — | Upgrade libxml2 | Aug 13, 2020 | Nov 18, 2015 |
| Apple Ios | — | Upgrade to the latest version of Apple iOS | Apr 18, 2016 | Nov 18, 2015 |
| Apple Osx Libxml2 | — | Apply OS X security update 2016-002Upgrade macOS to the latest version | Mar 29, 2016 | Nov 18, 2015 |
| Centos_linux | — | Upgrade libxml2-pythonUpgrade libxml2-staticUpgrade libxml2-debuginfoUpgrade libxml2Upgrade libxml2-devel | Apr 1, 2020 | Nov 18, 2015 |
| Debian | — | Upgrade libxml2 | Jan 4, 2016 | Nov 18, 2015 |
| Freebsd | — | Upgrade libxml2 | Dec 10, 2025 | Nov 20, 2015 |
| Gentoo Linux | — | Upgrade dev-libs/libxml2. | Oct 30, 2017 | Nov 18, 2015 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 26, 2016 | Nov 18, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libxml2-pythonUpgrade libxml2Upgrade libxml2-devel | Dec 4, 2019 | Nov 18, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libxml2Upgrade libxml2-pythonUpgrade libxml2-devel | Dec 18, 2019 | Nov 18, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | May 1, 2019 | Nov 18, 2015 |
| Oracle_linux | — | Upgrade libxml2-staticUpgrade libxml2Upgrade libxml2-pythonUpgrade libxml2-devel | Oct 5, 2022 | Nov 18, 2015 |
| Redhat_linux | — | Upgrade libxml2-staticUpgrade libxml2-pythonUpgrade libxml2Upgrade libxml2-develUpgrade libxml2-debuginfo | Apr 1, 2020 | Nov 18, 2015 |
| Suse | — | Upgrade sles12-docker-imageUpgrade python3-libxml2-pythonUpgrade ruby2.5-rubygem-nokogiriUpgrade python-libxml2Upgrade libxml2-develUpgrade libxml2-2Upgrade libxml2-2-32bitUpgrade libxml2-toolsUpgrade libxml2-doc | Jan 4, 2016 | Nov 18, 2015 |
| Ubuntu | — | Upgrade libxml2 | Nov 23, 2015 | Nov 16, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub