libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | apple-itunes-upgrade-latest | Oct 19, 2018 | May 18, 2017 | |
| Apple Osx Libxml2 | apple-osx-security-update-2017-001-sierraapple-osx-upgrade-latest | Oct 19, 2018 | May 18, 2017 | |
| Debian | debian-upgrade-libxml2 | Aug 23, 2017 | May 18, 2017 | |
| Freebsd | freebsd-upgrade-package-libxml2 | Dec 14, 2017 | Dec 13, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-libxml2 | Nov 13, 2017 | May 18, 2017 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libxml2huawei-euleros-2_0_sp5-upgrade-libxml2-develhuawei-euleros-2_0_sp5-upgrade-libxml2-python | Nov 19, 2019 | May 18, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-libxml2-2-9-5-0-175-3-27-0-1-0oracle-solaris-11-3-upgrade-library-python-libxml2-27-2-9-5-0-175-3-27-0-1-0oracle-solaris-11-3-upgrade-library-python-libxml2-34-2-9-5-0-175-3-27-0-1-0 | Jan 19, 2021 | May 18, 2017 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | May 15, 2017 | |
| Suse | — | suse-upgrade-libxml2suse-upgrade-libxml2-2suse-upgrade-libxml2-2-32bitsuse-upgrade-libxml2-32bitsuse-upgrade-libxml2-develsuse-upgrade-libxml2-devel-32bitsuse-upgrade-libxml2-docsuse-upgrade-libxml2-pythonsuse-upgrade-libxml2-toolssuse-upgrade-libxml2-x86suse-upgrade-python-libxml2suse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-imagesuse-upgrade-sles12sp2-docker-image | May 31, 2017 | May 18, 2017 |
| Ubuntu | ubuntu-upgrade-libxml2 | Sep 19, 2017 | May 18, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub