CVE:CVE-2015-3451
CNNVD:CNNVD-201505-023
Libxml2是GNOME项目组所研发的一个基于C语言的用来解析XML文档的函数库，它支持多种编码格式、Xpath解析、Well-formed和valid验证等。XML::LibXML是libxml2的一个Perl绑定。
XML::LibXML 2.0119之前版本的‘_clone’函数中存在安全漏洞，该漏洞源于程序没有正确设置expand_entities选项。远程攻击者可借助‘new’或‘load_xml’函数中特制的XML数据利用该漏洞实施XML外部实体漏洞。
solution:Upgrade xml-libxml_project xml-libxml to a higher version than 2.0118,and avoid the version (,2.0118]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,14.10,15.04,and avoid the version 12.04,14.04,14.10,15.04; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade fedoraproject fedora to a higher version than 20,21,and avoid the version 20,21; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2