Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-libxml2Upgrade libxml2Upgrade libxml2-devel | Dec 19, 2023 | Aug 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libxml2-staticUpgrade libxml2-pythonUpgrade libxml2-debuginfoUpgrade libxml2-develUpgrade libxml2 | Sep 21, 2023 | Aug 29, 2023 |
| Amazon_linux | — | Upgrade libxml2 | Oct 7, 2023 | Aug 29, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-libxml2Upgrade libxml2-staticUpgrade libxml2-debuginfoUpgrade libxml2Upgrade libxml2-develUpgrade python3-libxml2-debuginfoUpgrade libxml2-debugsource | Feb 17, 2025 | Aug 29, 2023 |
| Centos_linux | — | Upgrade libxml2-debuginfoUpgrade libxml2-debugsourceUpgrade libxml2-develUpgrade python3-libxml2Upgrade python3-libxml2-debuginfoUpgrade libxml2 | Dec 13, 2023 | Aug 29, 2023 |
| Debian | — | Upgrade libxml2 | Feb 24, 2025 | Aug 29, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Oracle_linux | — | Upgrade python3-libxml2Upgrade libxml2-develUpgrade libxml2 | Dec 13, 2023 | Aug 29, 2023 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel9-operator | Jun 26, 2024 | Aug 29, 2023 |
| Redhat_linux | — | Upgrade python3-libxml2-debuginfoUpgrade python3-libxml2Upgrade libxml2-develUpgrade libxml2No solution existsUpgrade libxml2-debugsourceUpgrade libxml2-debuginfo | Nov 29, 2023 | Aug 29, 2023 |
| Rocky_linux | — | Upgrade libxml2-debuginfoUpgrade libxml2-develUpgrade python3-libxml2-debuginfoUpgrade python3-libxml2Upgrade libxml2Upgrade libxml2-debugsource | May 8, 2025 | Aug 29, 2023 |
| Suse | — | Upgrade libxml2-toolsUpgrade python3-libxml2Upgrade libxml2-develUpgrade python2-libxml2-pythonUpgrade libxml2-2Upgrade python3-libxml2-pythonUpgrade python311-libxml2Upgrade libxml2-devel-32bitUpgrade libxml2-2-32bitUpgrade libxml2-docUpgrade python-libxml2 | Sep 19, 2023 | Aug 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub