CVE-2017-9049

🗓️ 18 May 2017 06:13:00Reported by mitreType

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398

Reporter	Title	Published	Views	Family All 139
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server 2017Q4 Security Updater: IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.	15 Jun 201823:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libxml2 affects IBM Cognos Analytics	15 Jun 201823:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Libxml2 affect IBM Cognos Metrics Manager.	15 Jun 201823:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM RackSwitch Products	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM BladeCenter Advanced Management Module (AMM)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Streams may be affected by XMLsoft Libxml2 vulnerabilities	16 Jun 201814:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM Virtual Fabric 10Gb Switch Module for IBM BladeCenter	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 affect IBM Flex System Networking Switch Products	31 Jan 201902:25	–	ibm

NVD

Node

xmlsoft libxml2Match2.9.4

Source	Link
securityfocus	www.securityfocus.com/bid/98601
debian	www.debian.org/security/2017/dsa-3952
security	www.security.gentoo.org/glsa/201711-01
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
openwall	www.openwall.com/lists/oss-security/2017/05/15/1
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E

13 May 2026 00:24Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 37.5

CVSS 3.17.5

EPSS0.00458

SSVC

CWE-125