AZL-80196 CVE-2006-10003 affecting package perl-XML-Parser for versions less than 2.47-2

🗓️ 19 Mar 2026 12:16:17Reported by GoogleType

osv🔗 osv.dev👁 4 Views

XML::Parser has an off-by-one heap buffer overflow in st_serial_stack with deep nesting.

Reporter	Title	Published	Views	Family All 146
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	20 May 202615:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	25 May 202613:53	–	ibm
ATTACKERKB	CVE-2006-10003	19 Mar 202611:08	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : perl-XML-Parser, perl-XML-Parser-tests (ALAS2023-2026-1536)	13 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : perl-XML-Parser, --advisory ALAS2-2026-3230 (ALAS-2026-3230)	14 Apr 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : perl-XML-Parser (ALSA-2026:7679)	16 Apr 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : perl-XML-Parser (ALSA-2026:7680)	15 Apr 202600:00	–	nessus
Tenable Nessus	AlmaLinux 8 : perl-XML-Parser (ALSA-2026:7681)	16 Apr 202600:00	–	nessus
Tenable Nessus	Debian dla-4522 : libxml-parser-perl - security update	5 Apr 202600:00	–	nessus
Tenable Nessus	Debian dsa-6182 : libxml-parser-perl - security update	20 Apr 202600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2006-10003

29 Aug 2026 05:27Current

7.4High risk

Vulners AI Score7.4

CVSS 3.19.8

EPSS0.00548

SSVC

XML::Parser heap buffer overflow st_serial_stack off-by-one deep nesting Perl