parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxml2Upgrade clamav | Aug 22, 2024 | Nov 23, 2017 |
| Debian | — | Upgrade libxml2 | Feb 25, 2019 | Nov 23, 2017 |
| Freebsd | — | Upgrade clamav | Jul 10, 2018 | Jul 9, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libxml2-develUpgrade libxml2Upgrade libxml2-python | May 2, 2018 | Nov 23, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libxml2Upgrade libxml2-pythonUpgrade libxml2-devel | May 2, 2018 | Nov 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libxml2Upgrade libxml2-pythonUpgrade libxml2-devel | Jun 28, 2018 | Nov 23, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 25, 2017 |
| Suse | — | Upgrade libxml2-docUpgrade libxml2-x86Upgrade libxml2-32bitUpgrade libxml2-devel-32bitUpgrade libxml2Upgrade libxml2-pythonUpgrade libxml2-devel | Feb 9, 2018 | Nov 23, 2017 |
| Ubuntu | — | Upgrade python3-libxml2Upgrade libxml2-utilsUpgrade libxml2Upgrade python-libxml2 | Dec 5, 2017 | Nov 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub