suse · CVE-2015-8710

Quick triage

Priority: medium Published: 2021-05-30 13:35:47 UTC Updated: 2025-04-15 23:40:05 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-8710 severity moderate: SUSE including 39 source package names (libxml2, libxml2-2, …), 182 product×package rows across 47 product lines (HPE Helion OpenStack 8, SUSE Linux Enterprise Desktop 11 SP3, … (47 product lines)): Fixed 109, Known Not Affected 73.

Description:

The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possibly have unspecified other impact via an unclosed HTML comment.

cvelogic Threat Intelligence