An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libxml2alma-upgrade-libxml2-develalma-upgrade-python3-libxml2 | Jan 17, 2023 | Nov 23, 2022 | |
| Alpine Linux | alpine-linux-upgrade-libxml2 | Mar 26, 2024 | Nov 23, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libxml2amazon-linux-ami-2-upgrade-libxml2-debuginfoamazon-linux-ami-2-upgrade-libxml2-develamazon-linux-ami-2-upgrade-libxml2-pythonamazon-linux-ami-2-upgrade-libxml2-static | Mar 22, 2023 | Nov 23, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-libxml2 | May 4, 2023 | Oct 22, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libxml2amazon-linux-2023-upgrade-libxml2-debuginfoamazon-linux-2023-upgrade-libxml2-debugsourceamazon-linux-2023-upgrade-libxml2-develamazon-linux-2023-upgrade-libxml2-staticamazon-linux-2023-upgrade-python3-libxml2amazon-linux-2023-upgrade-python3-libxml2-debuginfoamazon-linux-2023-upgrade-xmlsec1amazon-linux-2023-upgrade-xmlsec1-debuginfoamazon-linux-2023-upgrade-xmlsec1-debugsourceamazon-linux-2023-upgrade-xmlsec1-develamazon-linux-2023-upgrade-xmlsec1-opensslamazon-linux-2023-upgrade-xmlsec1-openssl-debuginfoamazon-linux-2023-upgrade-xmlsec1-openssl-devel | Feb 17, 2025 | Oct 14, 2022 | |
| Apple Osx Libxml2 | apple-osx-upgrade-latest | Nov 10, 2022 | Nov 10, 2022 | |
| Centos_linux | — | centos-upgrade-libxml2centos-upgrade-libxml2-debuginfocentos-upgrade-libxml2-debugsourcecentos-upgrade-libxml2-develcentos-upgrade-python3-libxml2centos-upgrade-python3-libxml2-debuginfo | Jan 17, 2023 | Nov 23, 2022 |
| Debian | debian-upgrade-libxml2 | Nov 1, 2022 | Nov 1, 2022 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 15, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-libxml2 | Nov 1, 2022 | Oct 31, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libxml2huawei-euleros-2_0_sp10-upgrade-python3-libxml2 | Feb 13, 2023 | Nov 23, 2022 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libxml2huawei-euleros-2_0_sp11-upgrade-python3-libxml2 | Jan 6, 2023 | Nov 23, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libxml2huawei-euleros-2_0_sp5-upgrade-libxml2-develhuawei-euleros-2_0_sp5-upgrade-libxml2-python | Mar 9, 2023 | Nov 23, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libxml2huawei-euleros-2_0_sp8-upgrade-libxml2-develhuawei-euleros-2_0_sp8-upgrade-python2-libxml2huawei-euleros-2_0_sp8-upgrade-python3-libxml2 | Dec 9, 2022 | Nov 23, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libxml2huawei-euleros-2_0_sp9-upgrade-python3-libxml2 | Jan 9, 2023 | Nov 23, 2022 | |
| Ibm Aix | ibm-aix-libxml2_advisory4 | Feb 9, 2023 | Nov 23, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-libxml2oracle-linux-upgrade-libxml2-develoracle-linux-upgrade-python3-libxml2 | Jan 17, 2023 | Oct 14, 2022 |
| Redhat_linux | redhat-upgrade-libxml2redhat-upgrade-libxml2-debuginforedhat-upgrade-libxml2-debugsourceredhat-upgrade-libxml2-develredhat-upgrade-python3-libxml2redhat-upgrade-python3-libxml2-debuginfo | Jan 17, 2023 | Nov 23, 2022 | |
| Rocky_linux | rocky-upgrade-libxml2rocky-upgrade-libxml2-debuginforocky-upgrade-libxml2-debugsourcerocky-upgrade-libxml2-develrocky-upgrade-python3-libxml2rocky-upgrade-python3-libxml2-debuginfo | Mar 12, 2024 | Nov 23, 2022 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Nov 23, 2022 | |
| Suse | — | suse-upgrade-libxml2-2suse-upgrade-libxml2-2-32bitsuse-upgrade-libxml2-develsuse-upgrade-libxml2-devel-32bitsuse-upgrade-libxml2-docsuse-upgrade-libxml2-toolssuse-upgrade-python-libxml2suse-upgrade-python2-libxml2-pythonsuse-upgrade-python3-libxml2suse-upgrade-python3-libxml2-python | Oct 26, 2022 | Oct 22, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libxml2ubuntu-pro-upgrade-libxml2-utilsubuntu-upgrade-libxml2ubuntu-upgrade-libxml2-utils | Dec 5, 2022 | Oct 22, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub