An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libxml2alma-upgrade-libxml2-develalma-upgrade-python3-libxml2 | Aug 3, 2023 | Apr 24, 2023 | |
| Alpine Linux | alpine-linux-upgrade-libxml2alpine-linux-upgrade-qt5-qtwebengine | Mar 26, 2024 | Apr 24, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libxml2amazon-linux-ami-2-upgrade-libxml2-debuginfoamazon-linux-ami-2-upgrade-libxml2-develamazon-linux-ami-2-upgrade-libxml2-pythonamazon-linux-ami-2-upgrade-libxml2-static | May 3, 2023 | Apr 24, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-libxml2 | May 4, 2023 | Apr 24, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libxml2amazon-linux-2023-upgrade-libxml2-debuginfoamazon-linux-2023-upgrade-libxml2-debugsourceamazon-linux-2023-upgrade-libxml2-develamazon-linux-2023-upgrade-libxml2-staticamazon-linux-2023-upgrade-python3-libxml2amazon-linux-2023-upgrade-python3-libxml2-debuginfo | Feb 17, 2025 | Apr 11, 2023 | |
| Apple Osx Libxml2 | apple-osx-upgrade-latest | Dec 22, 2023 | Apr 24, 2023 | |
| Centos_linux | — | centos-upgrade-libxml2centos-upgrade-libxml2-debuginfocentos-upgrade-libxml2-debugsourcecentos-upgrade-libxml2-develcentos-upgrade-python3-libxml2centos-upgrade-python3-libxml2-debuginfo | Aug 2, 2023 | Apr 24, 2023 |
| Debian | debian-upgrade-libxml2 | Apr 24, 2023 | Apr 24, 2023 | |
| Dell Powerstore Dsa2023366 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Oct 5, 2023 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 14, 2024 | |
| Freebsd | freebsd-upgrade-package-electron22freebsd-upgrade-package-electron23freebsd-upgrade-package-libxml2 | May 19, 2023 | May 18, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-libxml2 | Feb 12, 2024 | Apr 24, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libxml2huawei-euleros-2_0_sp10-upgrade-python3-libxml2 | Jul 18, 2023 | Apr 24, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libxml2huawei-euleros-2_0_sp11-upgrade-python3-libxml2 | Jan 10, 2024 | Apr 24, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libxml2huawei-euleros-2_0_sp8-upgrade-libxml2-develhuawei-euleros-2_0_sp8-upgrade-python2-libxml2huawei-euleros-2_0_sp8-upgrade-python3-libxml2 | Jun 9, 2023 | Apr 24, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libxml2huawei-euleros-2_0_sp9-upgrade-python3-libxml2 | Jul 10, 2023 | Apr 24, 2023 | |
| Ibm Aix | ibm-aix-libxml2_advisory5 | Jul 27, 2023 | Apr 24, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-libxml2oracle-linux-upgrade-libxml2-develoracle-linux-upgrade-python3-libxml2 | Aug 3, 2023 | Apr 11, 2023 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libxml2redhat-upgrade-libxml2-debuginforedhat-upgrade-libxml2-debugsourceredhat-upgrade-libxml2-develredhat-upgrade-python3-libxml2redhat-upgrade-python3-libxml2-debuginfo | Aug 2, 2023 | Apr 24, 2023 | |
| Rocky_linux | rocky-upgrade-libxml2rocky-upgrade-libxml2-debuginforocky-upgrade-libxml2-debugsourcerocky-upgrade-libxml2-develrocky-upgrade-python3-libxml2rocky-upgrade-python3-libxml2-debuginfo | Mar 5, 2024 | Apr 24, 2023 | |
| Suse | — | suse-upgrade-libxml2-2suse-upgrade-libxml2-2-32bitsuse-upgrade-libxml2-develsuse-upgrade-libxml2-devel-32bitsuse-upgrade-libxml2-docsuse-upgrade-libxml2-toolssuse-upgrade-python-libxml2suse-upgrade-python2-libxml2-pythonsuse-upgrade-python3-libxml2suse-upgrade-python3-libxml2-python | Apr 27, 2023 | Apr 24, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libxml2ubuntu-pro-upgrade-libxml2-utilsubuntu-upgrade-libxml2ubuntu-upgrade-libxml2-utils | Apr 21, 2023 | Apr 19, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub