In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libxml2alma-upgrade-libxml2-develalma-upgrade-python3-libxml2 | Aug 3, 2023 | Apr 24, 2023 | |
| Alpine Linux | alpine-linux-upgrade-libxml2 | Mar 26, 2024 | Apr 24, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libxml2amazon-linux-ami-2-upgrade-libxml2-debuginfoamazon-linux-ami-2-upgrade-libxml2-develamazon-linux-ami-2-upgrade-libxml2-pythonamazon-linux-ami-2-upgrade-libxml2-static | May 3, 2023 | Apr 24, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-libxml2 | May 4, 2023 | Apr 11, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libxml2amazon-linux-2023-upgrade-libxml2-debuginfoamazon-linux-2023-upgrade-libxml2-debugsourceamazon-linux-2023-upgrade-libxml2-develamazon-linux-2023-upgrade-libxml2-staticamazon-linux-2023-upgrade-python3-libxml2amazon-linux-2023-upgrade-python3-libxml2-debuginfo | Feb 17, 2025 | Apr 11, 2023 | |
| Centos_linux | — | centos-upgrade-libxml2centos-upgrade-libxml2-debuginfocentos-upgrade-libxml2-debugsourcecentos-upgrade-libxml2-develcentos-upgrade-python3-libxml2centos-upgrade-python3-libxml2-debuginfo | Aug 2, 2023 | Apr 24, 2023 |
| Debian | debian-upgrade-libxml2 | Apr 24, 2023 | Apr 24, 2023 | |
| Dell Powerstore Dsa2023366 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Oct 5, 2023 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 16, 2024 | |
| Freebsd | freebsd-upgrade-package-libxml2 | Apr 16, 2023 | Apr 16, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-libxml2 | Feb 12, 2024 | Apr 24, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libxml2huawei-euleros-2_0_sp10-upgrade-python3-libxml2 | Jul 18, 2023 | Apr 24, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libxml2huawei-euleros-2_0_sp11-upgrade-python3-libxml2 | Jan 10, 2024 | Apr 24, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libxml2huawei-euleros-2_0_sp8-upgrade-libxml2-develhuawei-euleros-2_0_sp8-upgrade-python2-libxml2huawei-euleros-2_0_sp8-upgrade-python3-libxml2 | Jun 9, 2023 | Apr 24, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libxml2huawei-euleros-2_0_sp9-upgrade-python3-libxml2 | Jul 10, 2023 | Apr 24, 2023 | |
| Ibm Aix | ibm-aix-libxml2_advisory5 | Jul 27, 2023 | Apr 24, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-libxml2oracle-linux-upgrade-libxml2-develoracle-linux-upgrade-python3-libxml2 | Aug 3, 2023 | Apr 11, 2023 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libxml2redhat-upgrade-libxml2-debuginforedhat-upgrade-libxml2-debugsourceredhat-upgrade-libxml2-develredhat-upgrade-python3-libxml2redhat-upgrade-python3-libxml2-debuginfo | Aug 2, 2023 | Apr 24, 2023 | |
| Rocky_linux | rocky-upgrade-libxml2rocky-upgrade-libxml2-debuginforocky-upgrade-libxml2-debugsourcerocky-upgrade-libxml2-develrocky-upgrade-python3-libxml2rocky-upgrade-python3-libxml2-debuginfo | Mar 5, 2024 | Apr 24, 2023 | |
| Suse | — | suse-upgrade-libxml2-2suse-upgrade-libxml2-2-32bitsuse-upgrade-libxml2-develsuse-upgrade-libxml2-devel-32bitsuse-upgrade-libxml2-docsuse-upgrade-libxml2-toolssuse-upgrade-python-libxml2suse-upgrade-python2-libxml2-pythonsuse-upgrade-python3-libxml2suse-upgrade-python3-libxml2-python | Apr 27, 2023 | Apr 24, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libxml2ubuntu-pro-upgrade-libxml2-utilsubuntu-upgrade-libxml2ubuntu-upgrade-libxml2-utils | Apr 21, 2023 | Apr 19, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub