Lucene search
K

CVE-2025-6021

🗓️ 12 Jun 2025 12:49:16Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 143 Views

CVE-2025-6021 in Libxml2 allows integer overflow causing stack buffer overflow and denial of service.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in libxml2 affect AIX/VIOS
17 Jul 202516:10
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)
3 Mar 202600:44
ibm
IBM Security Bulletins
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to a use-after-free vulnerability due to the libxml2 package (CVE-2025-49794)
2 Sep 202514:33
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities due to libxml2, python3, pam and glibc  packages shipped with IBM CICS TX Advanced.
12 Aug 202511:56
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
5 Sep 202519:04
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in libxml2 library (CVE-2025-6021, CVE-2025-49794, CVE-2025-49796) affect Power HMC.
9 Sep 202513:52
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)
11 Nov 202514:43
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in libxml2 affects IBM Cloud Pak System[CVE-2025-6021]
25 Feb 202608:51
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities due to libxml2, python3 and pam packages shipped with TXSeries for Multiplatforms.
12 Aug 202511:41
ibm
IBM Security Bulletins
Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization
14 Aug 202516:48
ibm
Rows per page
NVD
Node
xmlsoftlibxml2Range<2.14.4
Node
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROR
[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.14.4",
        "versionType": "semver"
      }
    ],
    "packageName": "libxml2",
    "collectionURL": "https://gitlab.gnome.org/GNOME/libxml2/",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.12.5-7.el10_0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.0"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.1-6.el7_9.10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_els:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-21.el8_10.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-21.el8_10.1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-9.el8_2.3",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_aus:8.2::baseos",
      "cpe:/a:redhat:rhel_aus:8.2::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-9.el8_4.6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/o:redhat:rhel_aus:8.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-9.el8_4.6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/o:redhat:rhel_aus:8.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-13.el8_6.10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.6::appstream",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/o:redhat:rhel_tus:8.6::baseos",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-13.el8_6.10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.6::appstream",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/o:redhat:rhel_tus:8.6::baseos",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-13.el8_6.10",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_tus:8.6::appstream",
      "cpe:/o:redhat:rhel_e4s:8.6::baseos",
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/o:redhat:rhel_tus:8.6::baseos",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/a:redhat:rhel_e4s:8.6::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-16.el8_8.9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_tus:8.8::baseos",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.7-16.el8_8.9",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_tus:8.8::baseos",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-10.el9_6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9::baseos",
      "cpe:/a:redhat:enterprise_linux:9::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-10.el9_6",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9::baseos",
      "cpe:/a:redhat:enterprise_linux:9::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-1.el9_0.5",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.0::appstream",
      "cpe:/o:redhat:rhel_e4s:9.0::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-3.el9_2.7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/o:redhat:rhel_e4s:9.2::baseos",
      "cpe:/a:redhat:rhel_e4s:9.2::appstream"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:2.9.13-10.el9_4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.4::appstream",
      "cpe:/o:redhat:rhel_eus:9.4::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Core Services 2.4.62.SP2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected",
    "packageName": "libxml2",
    "cpes": [
      "cpe:/a:redhat:jboss_core_services:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.12",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "412.86.202509030110-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.12::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.13",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "413.92.202509030117-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.13::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.14",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "414.92.202508041909-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.14::el8",
      "cpe:/a:redhat:openshift:4.14::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.15",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "415.92.202508192014-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.15::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.16",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "416.94.202508050040-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.17",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "417.94.202508141510-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.18",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "418.94.202508060022-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.18::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4.19",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhcos",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "4.19.9.6.202507230107-0",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Discovery 2",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "discovery/discovery-server-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "sha256:ad07f55ee75fb20310c88f154a04665bd8465d138d66c665c300f61447858344",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:discovery:2::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Hardened Images",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "libxml2-main",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "2.15.2-0.3.hum1",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:hummingbird:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Insights proxy 1.5",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "insights-proxy/insights-proxy-container-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "sha256:c26d589f12647890b67aaa986f54d3f7c6f7f2563fb5a73f38d559e6138739d7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:insights_proxy:1.5::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libxml2",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 May 2026 13:17Current
7.4High risk
Vulners AI Score7.4
CVSS 3.17.5
EPSS0.02116
SSVC
143