Skip to content
OpenAdvisories
Medium DLA-4319-1 1 CVE

libxml2 - security update

Published Sep 30, 2025 · Updated Sep 30, 2025

Fixed packages 1

ReleasePackageFixed in
Debian · 11 libxml2 2.9.10+dfsg-6.7+deb11u9

Vulnerabilities 1

  • Medium 6.2

    Stack overflow in libxml2

    Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` wer…