The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libxml2-pythonUpgrade libxml2-staticUpgrade libxml2Upgrade libxml2-develUpgrade libxml2-debuginfo | Apr 27, 2020 | Dec 15, 2015 |
| Apple Ios | — | Upgrade to the latest version of Apple iOS | Apr 18, 2016 | Dec 15, 2015 |
| Apple Osx Libxml2 | — | Apply OS X security update 2016-002Upgrade macOS to the latest version | Mar 29, 2016 | Dec 15, 2015 |
| Centos_linux | — | Upgrade libxml2Upgrade libxml2-pythonUpgrade libxml2-staticUpgrade libxml2-devel | Dec 1, 2016 | Dec 15, 2015 |
| Debian | — | Upgrade libxml2 | Jul 30, 2024 | Dec 15, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 15, 2016 |
| Freebsd | — | Upgrade libxml2 | Dec 10, 2025 | Nov 20, 2015 |
| Gentoo Linux | — | Upgrade dev-libs/libxml2. | Oct 30, 2017 | Dec 15, 2015 |
| Oracle Solaris | — | Upgrade library/python/libxml2-27 to version 2.9.3-0.175.3.5.0.2.0 on Solaris 11.3Upgrade library/python/libxml2-34 to version 2.9.3-0.175.3.5.0.2.0 on Solaris 11.3Upgrade library/python/libxml2-26 to version 2.9.3-0.175.3.5.0.2.0 on Solaris 11.3Upgrade library/libxml2 to version 2.9.3-0.175.3.5.0.2.0 on Solaris 11.3 | May 29, 2017 | Dec 15, 2015 |
| Oracle_linux | — | Upgrade libxml2-staticUpgrade libxml2-pythonUpgrade libxml2-develUpgrade libxml2 | Oct 16, 2024 | Dec 15, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 11, 2015 |
| Suse | — | Upgrade ruby2.5-rubygem-nokogiriUpgrade libxml2-x86Upgrade sles12-docker-imageUpgrade python-libxml2Upgrade libxml2-devel-32bitUpgrade libxml2-develUpgrade libxml2Upgrade libxml2-32bitUpgrade python3-libxml2-pythonUpgrade libxml2-pythonUpgrade libxml2-2Upgrade libxml2-toolsUpgrade libxml2-2-32bitUpgrade libxml2-doc | Jan 4, 2016 | Dec 15, 2015 |
| Ubuntu | — | Upgrade libxml2 | Dec 15, 2015 | Dec 14, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub