CVE-2015-7500

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.3

Description The issue is related to the xmlParseMisc function in parser.c, which allows context-dependent attackers to cause a denial of service due to an out-of-bounds heap read. This is related to incorrect entities boundaries and start tags.

Recommendations For versions prior to 2.9.3, update to version 2.9.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the xmlParseMisc function until a patch is available.