Skip to content
OpenAdvisories
Critical DLA-1008-1 5 CVEs

libxml2 - security update

Published Jun 30, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 libxml2 2.8.0+dfsg1-7+wheezy8

Vulnerabilities 5

  • Critical 9.8
    CVE-2017-7375

    A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request e…

    libxml2 libxml2 Debian Ubuntu
  • High 7.5
    CVE-2017-9048

    libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementCont…

    libxml2 libxml2 Debian Ubuntu
  • High 7.5
    CVE-2017-9049

    libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey functio…

    libxml2 libxml2 Debian Ubuntu
  • High 7.5
    CVE-2017-9050

    Out-of-bounds read in nokogiri

    libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix f…

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  • Unscored —
    CVE-2017-9047

    A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in vali…

    libxml2 libxml2 Debian Ubuntu