libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libxml2 | Mar 21, 2024 | Oct 6, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libxml2amazon-linux-ami-2-upgrade-libxml2-debuginfoamazon-linux-ami-2-upgrade-libxml2-develamazon-linux-ami-2-upgrade-libxml2-pythonamazon-linux-ami-2-upgrade-libxml2-static | Nov 3, 2023 | Oct 6, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-libxml2 | Nov 4, 2023 | Oct 6, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libxml2amazon-linux-2023-upgrade-libxml2-debuginfoamazon-linux-2023-upgrade-libxml2-debugsourceamazon-linux-2023-upgrade-libxml2-develamazon-linux-2023-upgrade-libxml2-staticamazon-linux-2023-upgrade-python3-libxml2amazon-linux-2023-upgrade-python3-libxml2-debuginfo | Feb 17, 2025 | Aug 23, 2023 | |
| Debian | debian-upgrade-libxml2 | Feb 24, 2025 | Oct 6, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-libxml2 | Feb 12, 2024 | Oct 6, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libxml2huawei-euleros-2_0_sp10-upgrade-python3-libxml2 | Jan 10, 2024 | Oct 6, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libxml2huawei-euleros-2_0_sp11-upgrade-python3-libxml2 | Jan 10, 2024 | Oct 6, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libxml2huawei-euleros-2_0_sp8-upgrade-libxml2-develhuawei-euleros-2_0_sp8-upgrade-python2-libxml2huawei-euleros-2_0_sp8-upgrade-python3-libxml2 | Jul 23, 2024 | Oct 6, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libxml2huawei-euleros-2_0_sp9-upgrade-python3-libxml2 | Jan 10, 2024 | Oct 6, 2023 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Oct 6, 2023 | |
| Suse | — | suse-upgrade-libxml2-2suse-upgrade-libxml2-2-32bitsuse-upgrade-libxml2-develsuse-upgrade-libxml2-devel-32bitsuse-upgrade-libxml2-docsuse-upgrade-libxml2-toolssuse-upgrade-python-libxml2suse-upgrade-python3-libxml2suse-upgrade-python3-libxml2-pythonsuse-upgrade-python311-libxml2 | Nov 17, 2023 | Oct 6, 2023 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub