[Bug 1281930] New: libxml2: Out-of-bounds heap read on 0xff char in xml declaration

List overview All Threads
Download

newer

older

[Bug 1281936] New: libxml2: Buffer...

[Bug 1277146] New: libxml2: DoS...

Red Hat Bugzilla

13 Nov 2015 13 Nov '15

9:50 p.m.

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Bug ID: 1281930 Summary: libxml2: Out-of-bounds heap read on 0xff char in xml declaration Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: athmanem@gmail.com, c.david86@gmail.com, erik-fedora@vanpienbroek.nl, fedora-mingw@lists.fedoraproject.org, ktietz@redhat.com, lfarkas@lfarkas.org, ohudlick@redhat.com, rjones@redhat.com, veillard@redhat.com

An out-of-bounds heap read in xmlParseXMLDecl happens when a file containing unfinished xml declaration, e.g. <?xml versionencoding="ISO88598", is followed by 0xff byte.

Upstream bug:

https://bugzilla.gnome.org/show_bug.cgi?id=751631

Upstream patch:

https://git.gnome.org/browse/libxml2/commit/?id=709a952110e98621c9b78c4f2646...

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=RtnuYLKA2T&a=cc_unsubscribe

Show replies by date

Red Hat Bugzilla

13 Nov 13 Nov

9:51 p.m.

New subject: [Bug 1281930] libxml2: Out-of-bounds heap read on 0xff char in xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Adam Mariš amaris@redhat.com changed:

--- Comment #1 from Adam Mariš amaris@redhat.com ---

Created libxml2 tracking bugs for this issue:

Affects: fedora-all [bug 1281931]

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1281931 [Bug 1281931] libxml2: Out-of-bounds heap read on 0xff char in xml declaration [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1281932 [Bug 1281932] mingw-libxml2: libxml2: Out-of-bounds heap read on 0xff char in xml declaration [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1281933 [Bug 1281933] mingw-libxml2: libxml2: Out-of-bounds heap read on 0xff char in xml declaration [epel-7]

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=SjpkENrDy8&a=cc_unsubscribe

Red Hat Bugzilla

9:52 p.m.

New subject: [Bug 1281930] libxml2: Out-of-bounds heap read on 0xff char in xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

--- Comment #2 from Adam Mariš amaris@redhat.com ---

Created mingw-libxml2 tracking bugs for this issue:

Affects: fedora-all [bug 1281932] Affects: epel-7 [bug 1281933]

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=4k2L7schv0&a=cc_unsubscribe

Red Hat Bugzilla

11:06 p.m.

New subject: [Bug 1281930] libxml2: Out-of-bounds heap read on 0xff char in xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Adam Mariš amaris@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1281960

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=R3K8rYkRuV&a=cc_unsubscribe

Red Hat Bugzilla

19 Nov 19 Nov

12:48 p.m.

New subject: [Bug 1281930] libxml2: Out-of-bounds heap read on 0xff char in xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

--- Comment #3 from Adam Mariš amaris@redhat.com --- Acknowledgments:

Red Hat would like to thank GNOME project for reporting this issue. Upstream acknowledges Hanno Boeck as the original reporter.

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=DWxknUDB4C&a=cc_unsubscribe

Red Hat Bugzilla

23 Nov 23 Nov

2:20 p.m.

New subject: [Bug 1281930] libxml2: CVE-2015-8317 Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Adam Mariš amaris@redhat.com changed:

--- Comment #4 from Adam Mariš amaris@redhat.com --- CVE assignment:

http://seclists.org/oss-sec/2015/q4/354

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=fRYTgZRnUc&a=cc_unsubscribe

Red Hat Bugzilla

2:25 p.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Adam Mariš amaris@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=TohGQbKx3y&a=cc_unsubscribe

Red Hat Bugzilla

24 Nov 24 Nov

10:02 a.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1274223

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=nUZw8uavXm&a=cc_unsubscribe

Red Hat Bugzilla

10:15 a.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1284794

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=IWxDe3XUHZ&a=cc_unsubscribe

Red Hat Bugzilla

30 Nov 30 Nov

4:21 a.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=w0yvRviTYx&a=cc_unsubscribe

Red Hat Bugzilla

2 Dec 2 Dec

6:26 p.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Martin Cermak mcermak@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- CC| |mcermak@redhat.com

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=eNfPYITAgZ&a=cc_unsubscribe

Red Hat Bugzilla

7 Dec 7 Dec

11:14 a.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

--- Comment #8 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 6

Via RHSA-2015:2549 https://rhn.redhat.com/errata/RHSA-2015-2549.html

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=TnVEnSpRoc&a=cc_unsubscribe

Red Hat Bugzilla

1 p.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

--- Comment #9 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Red Hat Enterprise Linux 7

Via RHSA-2015:2550 https://rhn.redhat.com/errata/RHSA-2015-2550.html

-- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=f0PNfdIqp9&a=cc_unsubscribe

Red Hat Bugzilla

31 Mar 31 Mar

3:18 p.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Timothy Walsh twalsh@redhat.com changed:

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

1 Apr 1 Apr

6:06 a.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

Timothy Walsh twalsh@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1323034

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

18 Apr 18 Apr

1:42 p.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

--- Doc Text *updated* by Timothy Walsh twalsh@redhat.com --- An out-of-bounds head read vulnerability was found in libxml2 in the xmlParseXMLDecl function in parser.c that allows context-dependent attackers to obtain sensitive information via an unterminated encoding value or incomplete XML declaration in XML data.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

2:08 p.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

--- Doc Text *updated* by Timothy Walsh twalsh@redhat.com --- An out-of-bounds head read flaw was found in libxml2 in the xmlParseXMLDecl function in parser.c that allows context-dependent attackers to obtain sensitive information via an unterminated encoding value or incomplete XML declaration in XML data.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

6 May 6 May

11:25 a.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

--- Doc Text *updated* by Martin Prpic mprpic@redhat.com --- A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

17 May 17 May

6:14 p.m.

New subject: [Bug 1281930] CVE-2015-8317 libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

https://bugzilla.redhat.com/show_bug.cgi?id=1281930

--- Comment #13 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:

Via RHSA-2016:1089 https://rhn.redhat.com/errata/RHSA-2016-1089.html

-- You are receiving this mail because: You are on the CC list for the bug.

3039

Age (days ago)

3225

Last active (days ago)

mingw@lists.fedoraproject.org

18 comments

1 participants

tags (0)

participants (1)

Red Hat Bugzilla