Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-libxml2Upgrade libxml2Upgrade libxml2-devel | Dec 4, 2025 | Dec 1, 2025 |
| Debian | — | Upgrade libxml2 | Oct 2, 2025 | Oct 2, 2025 |
| Freebsd | — | Upgrade linux-rl9-libxsltUpgrade libxsltUpgrade linux-c7-libxslt | Jan 27, 2026 | Jul 12, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Mar 26, 2026 |
| Oracle_linux | — | Upgrade libxml2-develUpgrade python3-libxml2Upgrade libxml2 | Dec 2, 2025 | Sep 2, 2025 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | Sep 2, 2025 |
| Redhat_linux | — | Upgrade libxml2Upgrade libxml2-debuginfoUpgrade libxml2-develUpgrade libxml2-debugsourceUpgrade libxml2-staticUpgrade libxml2-pythonUpgrade python3-libxml2-debuginfoNo solution existsUpgrade python3-libxml2 | Nov 27, 2025 | Sep 2, 2025 |
| Rocky_linux | — | Upgrade libxml2-develUpgrade python3-libxml2-debuginfoUpgrade libxml2-debuginfoUpgrade libxml2Upgrade libxml2-debugsourceUpgrade python3-libxml2 | Feb 5, 2026 | Dec 2, 2025 |
| Ubuntu | — | Upgrade libxml2-devUpgrade libxml2-utilsUpgrade libxml2 (Ubuntu Pro)Upgrade libxml2Upgrade libxml2-utils (Ubuntu Pro)Upgrade libxml2-dev (Ubuntu Pro) | Sep 11, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 24, 2026 | Sep 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub