GCVE - cpe:2.3:a:xmlsoft:libxml2:2.9.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:xmlsoft:libxml2:2.9.2:*:*:*:*:*:*:*

part: a version: 2.9.2 update: *

Vendor	Xmlsoft (`be3c3366-cde4-54a5-8785-eb1f04df6881`)
Product	Libxml2 (`b6949b35-db17-5df6-ad91-0baa70a48eb5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/libxml2`	purl2cpe	2026-06-01 10:12:19.602917
`pkg:deb/ubuntu/libxml2`	purl2cpe	2026-06-01 10:12:19.602918
`pkg:github/gnome/libxml2`	purl2cpe	2026-06-01 10:12:19.602920
`pkg:gitlab/redhat/libxml2`	purl2cpe	2026-06-01 10:12:19.602921
`pkg:rpm/fedora/libxml2`	purl2cpe	2026-06-01 10:12:19.602923
`pkg:rpm/opensuse/libxml2`	purl2cpe	2026-06-01 10:12:19.602924

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-7942`	vulnerable	2026-06-08 05:07:02.385170	Details available The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941. Published: 2015-11-18T16:00:00.000Z Updated: 2024-08-06T08:06:30.993Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2015-2550.html http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html https://support.apple.com/HT206167 https://support.apple.com/HT206168	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-7941`	vulnerable	2026-06-08 05:07:02.384045	Details available libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities. Published: 2015-11-18T16:00:00.000Z Updated: 2024-08-06T08:06:31.043Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2015-2550.html http://www.securityfocus.com/bid/74241 http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html http://www.openwall.com/lists/oss-security/2015/10/22/5 https://git.gnome.org/browse/libxml2/commit/?id=9b8512337d14c8ddf662fcb98b0135f225a1c489	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.