CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3451

The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.034

EPSS Ranking 86.8%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2015-3451

Xml-Libxml Project » Xml-Libxml » Version: 0.91

cpe:2.3:a:xml-libxml_project:xml-libxml:0.91
Xml-Libxml Project » Xml-Libxml » Version: 0.92

cpe:2.3:a:xml-libxml_project:xml-libxml:0.92
Xml-Libxml Project » Xml-Libxml » Version: 0.96

cpe:2.3:a:xml-libxml_project:xml-libxml:0.96
Xml-Libxml Project » Xml-Libxml » Version: 1.30

cpe:2.3:a:xml-libxml_project:xml-libxml:1.30
Xml-Libxml Project » Xml-Libxml » Version: 1.40

cpe:2.3:a:xml-libxml_project:xml-libxml:1.40
Xml-Libxml Project » Xml-Libxml » Version: 1.70

cpe:2.3:a:xml-libxml_project:xml-libxml:1.70
Xml-Libxml Project » Xml-Libxml » Version: 1.71

cpe:2.3:a:xml-libxml_project:xml-libxml:1.71
Xml-Libxml Project » Xml-Libxml » Version: 1.72

cpe:2.3:a:xml-libxml_project:xml-libxml:1.72
Xml-Libxml Project » Xml-Libxml » Version: 1.73

cpe:2.3:a:xml-libxml_project:xml-libxml:1.73
Xml-Libxml Project » Xml-Libxml » Version: 1.74

cpe:2.3:a:xml-libxml_project:xml-libxml:1.74
Xml-Libxml Project » Xml-Libxml » Version: 1.75

cpe:2.3:a:xml-libxml_project:xml-libxml:1.75
Xml-Libxml Project » Xml-Libxml » Version: 1.76

cpe:2.3:a:xml-libxml_project:xml-libxml:1.76
Xml-Libxml Project » Xml-Libxml » Version: 1.77

cpe:2.3:a:xml-libxml_project:xml-libxml:1.77
Xml-Libxml Project » Xml-Libxml » Version: 1.78

cpe:2.3:a:xml-libxml_project:xml-libxml:1.78
Xml-Libxml Project » Xml-Libxml » Version: 1.79

cpe:2.3:a:xml-libxml_project:xml-libxml:1.79
Xml-Libxml Project » Xml-Libxml » Version: 1.80

cpe:2.3:a:xml-libxml_project:xml-libxml:1.80
Xml-Libxml Project » Xml-Libxml » Version: 1.81

cpe:2.3:a:xml-libxml_project:xml-libxml:1.81
Xml-Libxml Project » Xml-Libxml » Version: 1.82

cpe:2.3:a:xml-libxml_project:xml-libxml:1.82
Xml-Libxml Project » Xml-Libxml » Version: 1.83

cpe:2.3:a:xml-libxml_project:xml-libxml:1.83
Xml-Libxml Project » Xml-Libxml » Version: 1.84

cpe:2.3:a:xml-libxml_project:xml-libxml:1.84
Xml-Libxml Project » Xml-Libxml » Version: 1.85

cpe:2.3:a:xml-libxml_project:xml-libxml:1.85
Xml-Libxml Project » Xml-Libxml » Version: 1.86

cpe:2.3:a:xml-libxml_project:xml-libxml:1.86
Xml-Libxml Project » Xml-Libxml » Version: 1.87

cpe:2.3:a:xml-libxml_project:xml-libxml:1.87
Xml-Libxml Project » Xml-Libxml » Version: 1.88

cpe:2.3:a:xml-libxml_project:xml-libxml:1.88
Xml-Libxml Project » Xml-Libxml » Version: 1.89

cpe:2.3:a:xml-libxml_project:xml-libxml:1.89
Xml-Libxml Project » Xml-Libxml » Version: 1.90

cpe:2.3:a:xml-libxml_project:xml-libxml:1.90
Xml-Libxml Project » Xml-Libxml » Version: 1.91

cpe:2.3:a:xml-libxml_project:xml-libxml:1.91
Xml-Libxml Project » Xml-Libxml » Version: 1.92

cpe:2.3:a:xml-libxml_project:xml-libxml:1.92
Xml-Libxml Project » Xml-Libxml » Version: 1.93

cpe:2.3:a:xml-libxml_project:xml-libxml:1.93
Xml-Libxml Project » Xml-Libxml » Version: 1.94

cpe:2.3:a:xml-libxml_project:xml-libxml:1.94
Xml-Libxml Project » Xml-Libxml » Version: 1.95

cpe:2.3:a:xml-libxml_project:xml-libxml:1.95
Xml-Libxml Project » Xml-Libxml » Version: 1.96

cpe:2.3:a:xml-libxml_project:xml-libxml:1.96
Xml-Libxml Project » Xml-Libxml » Version: 1.97

cpe:2.3:a:xml-libxml_project:xml-libxml:1.97
Xml-Libxml Project » Xml-Libxml » Version: 1.98

cpe:2.3:a:xml-libxml_project:xml-libxml:1.98
Xml-Libxml Project » Xml-Libxml » Version: 1.99

cpe:2.3:a:xml-libxml_project:xml-libxml:1.99
Xml-Libxml Project » Xml-Libxml » Version: 2.0000

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0000
Xml-Libxml Project » Xml-Libxml » Version: 2.0001

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0001
Xml-Libxml Project » Xml-Libxml » Version: 2.0002

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0002
Xml-Libxml Project » Xml-Libxml » Version: 2.0003

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0003
Xml-Libxml Project » Xml-Libxml » Version: 2.0004

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0004
Xml-Libxml Project » Xml-Libxml » Version: 2.0005

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0005
Xml-Libxml Project » Xml-Libxml » Version: 2.0006

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0006
Xml-Libxml Project » Xml-Libxml » Version: 2.0007

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0007
Xml-Libxml Project » Xml-Libxml » Version: 2.0008

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0008
Xml-Libxml Project » Xml-Libxml » Version: 2.0009

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0009
Xml-Libxml Project » Xml-Libxml » Version: 2.0010

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0010
Xml-Libxml Project » Xml-Libxml » Version: 2.0011

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0011
Xml-Libxml Project » Xml-Libxml » Version: 2.0012

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0012
Xml-Libxml Project » Xml-Libxml » Version: 2.0015

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0015
Xml-Libxml Project » Xml-Libxml » Version: 2.0016

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0016
Xml-Libxml Project » Xml-Libxml » Version: 2.0017

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0017
Xml-Libxml Project » Xml-Libxml » Version: 2.0018

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0018
Xml-Libxml Project » Xml-Libxml » Version: 2.0019

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0019
Xml-Libxml Project » Xml-Libxml » Version: 2.0100

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0100
Xml-Libxml Project » Xml-Libxml » Version: 2.0101

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0101
Xml-Libxml Project » Xml-Libxml » Version: 2.0102

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0102
Xml-Libxml Project » Xml-Libxml » Version: 2.0103

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0103
Xml-Libxml Project » Xml-Libxml » Version: 2.0104

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0104
Xml-Libxml Project » Xml-Libxml » Version: 2.0105

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0105
Xml-Libxml Project » Xml-Libxml » Version: 2.0106

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0106
Xml-Libxml Project » Xml-Libxml » Version: 2.0107

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0107
Xml-Libxml Project » Xml-Libxml » Version: 2.0108

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0108
Xml-Libxml Project » Xml-Libxml » Version: 2.0109

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0109
Xml-Libxml Project » Xml-Libxml » Version: 2.0110

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0110
Xml-Libxml Project » Xml-Libxml » Version: 2.0111

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0111
Xml-Libxml Project » Xml-Libxml » Version: 2.0112

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0112
Xml-Libxml Project » Xml-Libxml » Version: 2.0113

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0113
Xml-Libxml Project » Xml-Libxml » Version: 2.0114

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0114
Xml-Libxml Project » Xml-Libxml » Version: 2.0115

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0115
Xml-Libxml Project » Xml-Libxml » Version: 2.0116

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0116
Xml-Libxml Project » Xml-Libxml » Version: 2.0117

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0117
Xml-Libxml Project » Xml-Libxml » Version: 2.0118

cpe:2.3:a:xml-libxml_project:xml-libxml:2.0118
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 14.10

cpe:2.3:o:canonical:ubuntu_linux:14.10
Canonical » Ubuntu Linux » Version: 15.04

cpe:2.3:o:canonical:ubuntu_linux:15.04
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Fedoraproject » Fedora » Version: 20

cpe:2.3:o:fedoraproject:fedora:20
Fedoraproject » Fedora » Version: 21

cpe:2.3:o:fedoraproject:fedora:21
Opensuse » Opensuse » Version: 13.1

cpe:2.3:o:opensuse:opensuse:13.1
Opensuse » Opensuse » Version: 13.2

cpe:2.3:o:opensuse:opensuse:13.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3451

Products

Pricing

Contact Us