Is CVE-2015-1819 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 6%.

What products does CVE-2015-1819 affect?

Tracked products affected include Ubuntu. Check the version you run to see whether it is affected.

How do I fix CVE-2015-1819?

Apply the vendor fix in your normal patch cycle. Upgrade affected products to a fixed version.

CVE-2015-1819

Q: What is CVE-2015-1819?

CVE-2015-1819 is a medium-severity software vulnerability (CWE-399) with a CVSS score of 5. The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

MEDIUM severity · CVSS 5 · CWE-399

5CVSS MEDIUM

Summary

The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges required—

User interaction—

Confidentiality impactNone

Integrity impactNone

Availability impact—

Exploit probability (EPSS)6%

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products we track (1)

Ubuntu

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

NVD record
http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.htmlAdvisory
http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.htmlAdvisory
http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.htmlAdvisory
http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlAdvisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172710.htmlAdvisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172943.htmlAdvisory
http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.htmlAdvisory
http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.htmlAdvisory