CVE-2015-8317

CVE-2015-8317 describes an out-of-bounds heap read vulnerability in the xmlParseXMLDecl function of libxml2 versions prior to 2.9.3, affecting products from vendors like Canonical, Debian, HP, Red Hat, and XMLSoft. This flaw can be triggered by an unterminated encoding value or incomplete XML declaration in XML data. With a CVSS score of 5.0, it represents a medium severity issue, allowing unauthenticated attackers over a network to potentially obtain sensitive information (confidentiality impact) with low attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat level.