An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libxml2alma-upgrade-libxml2-develalma-upgrade-python3-libxml2 | Jan 17, 2023 | Nov 23, 2022 | |
| Alpine Linux | alpine-linux-upgrade-libxml2 | Mar 26, 2024 | Nov 22, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libxml2amazon-linux-ami-2-upgrade-libxml2-debuginfoamazon-linux-ami-2-upgrade-libxml2-develamazon-linux-ami-2-upgrade-libxml2-pythonamazon-linux-ami-2-upgrade-libxml2-static | Mar 22, 2023 | Nov 23, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-libxml2 | May 4, 2023 | Oct 22, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libxml2amazon-linux-2023-upgrade-libxml2-debuginfoamazon-linux-2023-upgrade-libxml2-debugsourceamazon-linux-2023-upgrade-libxml2-develamazon-linux-2023-upgrade-libxml2-staticamazon-linux-2023-upgrade-python3-libxml2amazon-linux-2023-upgrade-python3-libxml2-debuginfoamazon-linux-2023-upgrade-xmlsec1amazon-linux-2023-upgrade-xmlsec1-debuginfoamazon-linux-2023-upgrade-xmlsec1-debugsourceamazon-linux-2023-upgrade-xmlsec1-develamazon-linux-2023-upgrade-xmlsec1-opensslamazon-linux-2023-upgrade-xmlsec1-openssl-debuginfoamazon-linux-2023-upgrade-xmlsec1-openssl-devel | Feb 17, 2025 | Oct 14, 2022 | |
| Apple Osx Libxml2 | apple-osx-upgrade-latest | Nov 10, 2022 | Nov 10, 2022 | |
| Centos_linux | — | centos-upgrade-libxml2centos-upgrade-libxml2-debuginfocentos-upgrade-libxml2-debugsourcecentos-upgrade-libxml2-develcentos-upgrade-python3-libxml2centos-upgrade-python3-libxml2-debuginfo | Jan 17, 2023 | Nov 23, 2022 |
| Debian | debian-upgrade-libxml2 | Nov 1, 2022 | Nov 1, 2022 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-libxml2 | Nov 1, 2022 | Oct 31, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libxml2huawei-euleros-2_0_sp10-upgrade-python3-libxml2 | Feb 13, 2023 | Nov 23, 2022 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libxml2huawei-euleros-2_0_sp11-upgrade-python3-libxml2 | Jan 6, 2023 | Nov 23, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libxml2huawei-euleros-2_0_sp5-upgrade-libxml2-develhuawei-euleros-2_0_sp5-upgrade-libxml2-python | Mar 9, 2023 | Nov 23, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libxml2huawei-euleros-2_0_sp8-upgrade-libxml2-develhuawei-euleros-2_0_sp8-upgrade-python2-libxml2huawei-euleros-2_0_sp8-upgrade-python3-libxml2 | Dec 9, 2022 | Nov 23, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libxml2huawei-euleros-2_0_sp9-upgrade-python3-libxml2 | Jan 9, 2023 | Nov 23, 2022 | |
| Ibm Aix | ibm-aix-libxml2_advisory4 | Feb 9, 2023 | Nov 23, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-libxml2oracle-linux-upgrade-libxml2-develoracle-linux-upgrade-python3-libxml2 | Jan 17, 2023 | Oct 14, 2022 |
| Redhat_linux | redhat-upgrade-libxml2redhat-upgrade-libxml2-debuginforedhat-upgrade-libxml2-debugsourceredhat-upgrade-libxml2-develredhat-upgrade-python3-libxml2redhat-upgrade-python3-libxml2-debuginfo | Jan 17, 2023 | Nov 23, 2022 | |
| Rocky_linux | rocky-upgrade-libxml2rocky-upgrade-libxml2-debuginforocky-upgrade-libxml2-debugsourcerocky-upgrade-libxml2-develrocky-upgrade-python3-libxml2rocky-upgrade-python3-libxml2-debuginfo | Mar 12, 2024 | Nov 23, 2022 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Nov 22, 2022 | |
| Suse | — | suse-upgrade-libxml2-2suse-upgrade-libxml2-2-32bitsuse-upgrade-libxml2-develsuse-upgrade-libxml2-devel-32bitsuse-upgrade-libxml2-docsuse-upgrade-libxml2-toolssuse-upgrade-python-libxml2suse-upgrade-python2-libxml2-pythonsuse-upgrade-python3-libxml2suse-upgrade-python3-libxml2-python | Oct 26, 2022 | Oct 22, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libxml2ubuntu-pro-upgrade-libxml2-utilsubuntu-pro-upgrade-ruby-nokogiriubuntu-upgrade-libxml2ubuntu-upgrade-libxml2-utils | Dec 5, 2022 | Oct 22, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub