vulnerability

Alma Linux: CVE-2020-24977: Moderate: libxml2 security update (ALSA-2021-1597)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:P)

Published

Sep 4, 2020

Added

May 4, 2022

Modified

Mar 31, 2026

Description

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

Solutions

alma-upgrade-libxml2alma-upgrade-libxml2-develalma-upgrade-python3-libxml2

References

CVE-2020-24977
https://attackerkb.com/topics/CVE-2020-24977
CWE-125
EUVD-EUVD-2020-17677
https://errata.almalinux.org/8/ALSA-2021-1597.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-17677

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report