Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 29, 2017 |
| Debian | — | Upgrade libxml-libxml-perl | Nov 19, 2017 | Jun 29, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 3, 2020 | Jun 29, 2017 |
| Huawei Euleros 2_0_sp3 | — | — | Sep 28, 2020 | Jun 29, 2017 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 2, 2020 | Jun 29, 2017 |
| Oracle Solaris | — | Upgrade library/perl-5/alien-build-526 to version 1.89-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/path-tiny-526 to version 0.108-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/xml-libxml-526 to version 2.201-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/file-chdir-526 to version 0.1011-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/capture-tiny to version 0.48-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/alien-libxml2-522 to version 0.9-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/pkgconfig-522 to version 0.23026-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/capture-tiny-522 to version 0.48-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/pkgconfig to version 0.23026-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/xml-libxml to version 2.201-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/file-which-522 to version 1.23-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/alien-libxml2-526 to version 0.9-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/alien-libxml2 to version 0.9-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/path-tiny-522 to version 0.108-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/file-chdir-522 to version 0.1011-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/xml-libxml-522 to version 2.201-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/file-which to version 1.23-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/pkgconfig-526 to version 0.23026-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/capture-tiny-526 to version 0.48-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/alien-build-522 to version 1.89-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/file-chdir to version 0.1011-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/path-tiny to version 0.108-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/alien-build to version 1.89-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/perl-5/file-which-526 to version 1.23-11.4.16.0.1.3.0 on Solaris 11.4 | Dec 18, 2019 | Jun 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 27, 2017 |
| Suse | — | Upgrade perl-XML-LibXML | Jan 18, 2018 | Jun 29, 2017 |
| Ubuntu | — | Upgrade libxml-libxml-perl | Nov 27, 2017 | Jun 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub