Skip to content
OpenAdvisories
Unscored DSA-2652-1 2 CVEs

libxml2 - external entity expansion

Published Mar 24, 2013 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 libxml2 2.7.8.dfsg-2+squeeze7

Vulnerabilities 2

  • Unscored —

    libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) …

  • Unscored —

    libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xml…