CVE:CVE-2015-7942
CNNVD:CNNVD-201511-296
Libxml2是GNOME项目组所研发的一个基于C语言的用来解析XML文档的函数库，它支持多种编码格式、Xpath解析、Well-formed和valid验证等。
Libxml2的parser.c文件中的‘xmlParseConditionalSections’函数中存在安全漏洞，该漏洞源于程序停止解析无效输入时没有正确跳过中间实体。攻击者可借助特制的XML数据利用该漏洞造成拒绝服务（越边界读取和崩溃）。
solution:Upgrade hp icewall_federation_agent to a higher version than 3.0,and avoid the version 3.0; Upgrade hp icewall_file_manager to a higher version than 3.0,and avoid the version 3.0; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade apple iphone_os to a higher version than 9.2.1,and avoid the version (,9.2.1]; Upgrade apple mac_os_x to a higher version than 10.11.3,and avoid the version (,10.11.3]; Upgrade apple tvos to a higher version than 9.1,and avoid the version (,9.1]; Upgrade apple watchos to a higher version than 2.1,and avoid the version (,2.1]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10; Upgrade xmlsoft libxml2 to a higher version than 2.9.2,and avoid the version 2.9.2