CVE-2018-14404

🗓️ 19 Jul 2018 13:00:00Reported by mitreType

A NULL pointer dereference vulnerability in libxml2 through 2.9.8 allows denial of service via invalid XPath expression

Reporter	Title	Published	Views	Family All 220
IBM Security Bulletins	Security Bulletin: IBM RackSwitch firmware products are affected by vulnerabilities in Libxml2	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities	9 Apr 202103:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libxml2 affects IBM Watson Studio Local	18 Dec 201918:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter Dynamic System Analysis (DSA) Preboot is affected by multiple vulnerabilities.	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in libxml2 (CVE-2018-14404)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in glib2, libxml2 and ntp	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	25 Sep 202517:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libxml2 may affect IBM Storage Archive	26 Aug 202522:21	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been fixed in the IBM Security Access Manager and IBM Security Verify Access products	14 Oct 202016:31	–	ibm

NVD

Node

canonical ubuntu_linuxMatch12.04esm

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

debian debian_linuxMatch-

Node

xmlsoft libxml2Range≤2.9.8

Source	Link
usn	www.usn.ubuntu.com/3739-2/
lists	www.lists.debian.org/debian-lts-announce/2018/09/msg00035.html
usn	www.usn.ubuntu.com/3739-1/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2019:1543
gitlab	www.gitlab.gnome.org/GNOME/libxml2/issues/10
lists	www.lists.debian.org/debian-lts-announce/2020/09/msg00009.html
security	www.security.netapp.com/advisory/ntap-20190719-0002/
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi

03 Dec 2025 21:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25

CVSS 37.5

CVSS 3.16.5

EPSS0.20012

SSVC

CWE-476