libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.

References

www.debian.org/security/2017/dsa-3952

www.openwall.com/lists/oss-security/2017/05/15/1

www.securityfocus.com/bid/98568

lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E

lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E

security.gentoo.org/glsa/201711-01

prion 2

cve 2

redhatcve 2

veracode 4

github 1

debiancve 2

osv 34

nvd 2

ubuntucve 5

nessus 43

openvas 33

f5 1

zdt 1

cvelist 1

freebsd 2

ibm 20

debian 6

ubuntu 3

cloudfoundry 2

rubygems 1

photon 1

altlinux 5

gentoo 2

suse 5

archlinux 1

mageia 2

centos 1

redhat 2

amazon 1

fedora 2

oraclelinux 1

symantec 1

apple 8

prion

Heap overflow

2017-05-18 06:29:00

Heap overflow

2016-05-20 10:59:00

cve

CVE-2017-9050

2017-05-18 06:29:00

CVE-2016-1839

2016-05-20 10:59:53

redhatcve

CVE-2017-9050

2017-05-19 08:26:34

CVE-2016-1839

2016-07-18 14:20:04

veracode

Heap-based Buffer Overflow Through Embedded C Dependency

2017-05-17 06:35:24

Heap-based Buffer Overflow Through Embedded C Dependency

2017-05-17 06:47:14

Denial Of Service (DoS)

2018-05-14 07:48:10

github

Out-of-bounds read in nokogiri

2017-12-13 21:38:24

debiancve

CVE-2017-9050

2017-05-18 06:29:00

CVE-2016-1839

2016-05-20 10:59:53

osv

Out-of-bounds read in nokogiri

2017-12-13 21:38:24

libxml2 - security update

2017-06-30 00:00:00

libxml2 - security update

2017-08-23 00:00:00

nvd

CVE-2017-9050

2017-05-18 06:29:00

CVE-2016-1839

2016-05-20 10:59:53

ubuntucve

CVE-2017-9050

2017-05-18 00:00:00

CVE-2016-1839

2016-05-20 00:00:00

CVE-2017-9049

2017-05-18 00:00:00

nessus

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:1454-1)

2017-05-31 00:00:00

openSUSE Security Update : libxml2 (openSUSE-2017-663)

2017-06-09 00:00:00

F5 Networks BIG-IP : libxml2 vulnerability (K26422113)

2016-12-20 00:00:00

openvas

SUSE: Security Advisory (SUSE-SU-2017:1454-1)

2021-04-19 00:00:00

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2020-1268)

2020-03-19 00:00:00

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2019-2211)

2020-01-23 00:00:00

K26422113 : libxml2 vulnerability CVE-2016-1839

2016-12-07 00:00:00

zdt

libxml2 - xmlDictAddString Heap Based Buffer Overread

2016-02-24 00:00:00

cvelist

CVE-2016-1839

2016-05-20 10:00:00

freebsd

libxml2 -- Multiple Issues

2017-05-10 00:00:00

libxml2 -- multiple vulnerabilities

2016-05-23 00:00:00

ibm

Security Bulletin: Vulnerabilities in libxml2 affect IBM Flex System Networking Switch Products

2019-01-31 02:25:02

Security Bulletin: Vulnerabilities in libxml2 affect IBM RackSwitch Products

2019-01-31 02:25:02

Security Bulletin: Vulnerabilities in libxml2 affect IBM Virtual Fabric 10Gb Switch Module for IBM BladeCenter

2023-04-14 14:32:25

debian

[SECURITY] [DLA 1008-1] libxml2 security update

2017-06-30 20:47:21

[SECURITY] [DSA 3952-1] libxml2 security update

2017-08-23 04:54:22

[SECURITY] [DSA 3952-1] libxml2 security update

2017-08-23 04:54:22

ubuntu

libxml2 vulnerabilities

2017-10-10 00:00:00

libxml2 vulnerabilities

2017-09-19 00:00:00

libxml2 vulnerabilities

2016-06-06 00:00:00

cloudfoundry

USN-3424-1: libxml2 vulnerabilities | Cloud Foundry

2017-11-01 00:00:00

USN-2994-1 libxml2 vulnerabilities | Cloud Foundry

2016-06-13 00:00:00

rubygems

Nokogiri gem, via libxml, is affected by DoS and RCE vulnerabilities

2017-09-18 21:00:00

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0024

2017-07-13 00:00:00

altlinux

Security fix for the ALT Linux 10 package libxml2 version 1:2.9.9.0.52.f824-alt1

2019-05-22 00:00:00

Security fix for the ALT Linux 9 package libxml2 version 1:2.9.9.0.52.f824-alt1

2019-05-22 00:00:00

Security fix for the ALT Linux 10 package libxml2 version 1:2.9.4.0.12.e905-alt1

2017-03-03 00:00:00

gentoo

libxml2: Multiple vulnerabilities

2017-11-10 00:00:00

libxml2: Multiple vulnerabilities

2017-01-16 00:00:00

suse

Security update for libxml2 (important)

2016-06-16 13:08:21

Security update for libxml2 (important)

2016-06-16 13:10:48

Security update for libxml2 (important)

2016-06-17 15:08:25

archlinux

libxml2: multiple issues

2016-05-26 00:00:00

mageia

Updated libxml2 & perl-XML-LibXML packages fix security vulnerabilities

2018-01-03 18:50:51

Updated libxml2 packages fix security vulnerability

2016-07-27 00:59:16

centos

libxml2 security update

2016-06-23 15:28:21

redhat

(RHSA-2016:1292) Important: libxml2 security update

2016-06-23 08:21:08

(RHSA-2018:2486) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update

2018-08-16 16:05:21

amazon

Important: libxml2

2016-07-14 16:30:00

fedora

[SECURITY] Fedora 25 Update: libxml2-2.9.4-2.fc25

2017-04-19 09:32:17

[SECURITY] Fedora 24 Update: libxml2-2.9.4-2.fc24

2017-04-19 07:53:28

oraclelinux

libxml2 security update

2016-06-23 00:00:00

symantec

SA129 : Multiple libxml2 Vulnerabilities

2016-09-01 08:00:00

apple

About the security content of iTunes 12.7 for Windows

2017-09-12 00:00:00

About the security content of watchOS 2.2.1 - Apple Support

2017-01-23 03:54:39

About the security content of watchOS 2.2.1

2016-05-16 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.9%

JSON

Related for CVELIST:CVE-2017-9050