CVE-2015-8035
libxml2: DoS caused by incorrect error detection during XZ decompression
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · November 2, 2015
Updated · May 15, 2026
Description
A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.
Statement
This issue did not affect the versions of libxml2 as shipped with Red Hat Enterprise Linux 5 and 6 as they did not include support for LZMA compression support.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 4.3AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-252 · Unchecked Return Value