CVE:CVE-2015-8317
CNNVD:CNNVD-201512-324
Libxml2是GNOME项目组所研发的一个基于C语言的用来解析XML文档的函数库，它支持多种编码格式、Xpath解析、Well-formed和valid验证等。
libxml2 2.9.3之前版本的parser.c文件中的‘xmlParseXMLDecl’函数存在安全漏洞。攻击者可借助XML数据中未终止的编码值和未完成的XML声明利用该漏洞获取敏感信息。
solution:Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10; Upgrade xmlsoft libxml2 to a higher version than 2.9.2,and avoid the version (,2.9.2]; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade hp icewall_federation_agent to a higher version than 3.0,and avoid the version 3.0; Upgrade hp icewall_file_manager to a higher version than 3.0,and avoid the version 3.0