Description
Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libxml2 | 2.6.32.dfsg-5 | — |
| Debian 13 | libxml2 | 2.6.32.dfsg-5 | — |
| Debian 12 | libxml2 | 2.6.32.dfsg-5 | — |
| Debian 4.0 | libxml2 | 2.6.27.dfsg-6 | DSA-1666-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | libxml2 +2 | 2.6.26-2.1.2.7 | RHSA-2008:0988 |
| RHEL 4 | libxml2 +2 | 2.6.16-12.6 | RHSA-2008:0988 |
| RHEL 3 | libxml2 +2 | 2.5.10-14 | RHSA-2008:0988 |
| RHEL 2 | libxml2 +2 | 2.4.19-12.ent | RHSA-2008:0988 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libxml2 | 2.9.4-1.22 | openSUSE-SU-2024:10192-1 |
| openSUSE Tumbleweed | python-libxml2 | 2.9.4-1.4 | openSUSE-SU-2024:10228-1 |
Advisories 4
- RHSA-2008:0988 Red Hat Security Advisory: libxml2 security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1666-1 libxml2 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10228-1 python-libxml2-2.9.4-1.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10192-1 libxml2-2-2.9.4-1.22 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 32766 third-party-advisory
- http://support.apple.com/kb/HT3639
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1
- 32326 vdb-entry
- 32773 third-party-advisory
- oval:org.mitre.oval:def:6360 vdb-entry signature
- ADV-2009-1621 vdb-entry
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1
- https://bugzilla.redhat.com/show_bug.cgi?id=470466
- oval:org.mitre.oval:def:6219 vdb-entry signature
- FEDORA-2008-9773 vendor-advisory
- 32807 third-party-advisory
- APPLE-SA-2009-06-08-1 vendor-advisory
- FEDORA-2008-9729 vendor-advisory
- 49993 vdb-entry
- 32764 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0001.html
- USN-673-1 vendor-advisory
- ADV-2009-0301 vdb-entry
- oval:org.mitre.oval:def:9888 vdb-entry signature
- 33746 third-party-advisory
- https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9
- ADV-2009-0034 vdb-entry
- 34247 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm
- 36173 third-party-advisory
- ADV-2009-1522 vdb-entry
- HPSBMA02492 vendor-advisory
- 251406 vendor-advisory
- GLSA-200812-06 vendor-advisory
- APPLE-SA-2009-06-17-1 vendor-advisory
- 32872 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm
- SSA:2008-324-01 vendor-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0325
- DSA-1666 vendor-advisory
- 32802 third-party-advisory
- 35379 third-party-advisory
- 32974 third-party-advisory
- 33792 third-party-advisory
- 36235 third-party-advisory
- 32762 third-party-advisory
- 265329 vendor-advisory
- RHSA-2008:0988 vendor-advisory
- 33417 third-party-advisory
- https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10
- 261688 vendor-advisory
- MDVSA-2008:231 vendor-advisory
- http://support.apple.com/kb/HT3613
- ADV-2009-0323 vdb-entry
- SUSE-SR:2008:026 vendor-advisory
- 32811 third-party-advisory
- ADV-2008-3176 vdb-entry
- 1021238 vdb-entry