Libxml2 Security Vulnerabilities and Issues — Libxml2 CVE List

Lucene search

XmlsoftLibxml2

2 matches found

CVE•added 2017/11/23 9:29 p.m.•234 views

CVE-2017-16931

parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.

9.8CVSS8.9AI score0.00462EPSS

CVE•added 2017/11/23 9:29 p.m.•181 views

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

7.5CVSS6.7AI score0.01584EPSS