7.5
CVSSv3

CVE-2017-9050

Published: 18/05/2017 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 446
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

xmlsoft libxml2 2.9.4

Vendor Advisories

Synopsis Important: Red Hat JBoss Core Services Apache HTTP Server 2429 security update Type/Severity Security Advisory: Important Topic Red Hat JBoss Core Services Pack Apache Server 2429 packages for Microsoft Windows and Oracle Solaris are now availableRed Hat Product Security has rated this release ...
Several security issues were fixed in libxml2 ...
Several security issues were fixed in libxml2 ...
Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause a denial-of-service against the application, information leaks, or potentially, the execu ...
Debian Bug report logs - #870865 libxml2: CVE-2017-7376: Incorrect limit used for port values Package: src:libxml2; Maintainer for src:libxml2 is Debian XML/SGML Group <debian-xml-sgml-pkgs@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 5 Aug 2017 20:39:02 UTC Severity: im ...
Debian Bug report logs - #863022 libxml2: CVE-2017-9047: stack overflow in validc Package: src:libxml2; Maintainer for src:libxml2 is Debian XML/SGML Group <debian-xml-sgml-pkgs@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 20 May 2017 09:36:02 UTC Severity: important Tag ...
Debian Bug report logs - #870867 libxml2: CVE-2017-7375: Missing validation for external entities in xmlParsePEReference Package: src:libxml2; Maintainer for src:libxml2 is Debian XML/SGML Group <debian-xml-sgml-pkgs@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 5 Aug 2017 ...
Debian Bug report logs - #870870 libxml2: CVE-2017-0663: Heap buffer overflow in xmlAddID Package: src:libxml2; Maintainer for src:libxml2 is Debian XML/SGML Group <debian-xml-sgml-pkgs@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 5 Aug 2017 21:03:01 UTC Severity: import ...
Debian Bug report logs - #863019 libxml2: CVE-2017-9049: heap-based buffer overflow in xmlDictComputeFastKey Package: src:libxml2; Maintainer for src:libxml2 is Debian XML/SGML Group <debian-xml-sgml-pkgs@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 20 May 2017 09:12:01 UT ...
Debian Bug report logs - #863022 libxml2: CVE-2017-9047: stack overflow in validc Package: src:libxml2; Maintainer for src:libxml2 is Debian XML/SGML Group <debian-xml-sgml-pkgs@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 20 May 2017 09:36:02 UTC Severity: important Tag ...
Debian Bug report logs - #863021 libxml2: CVE-2017-9048: another stack overflow in validc Package: src:libxml2; Maintainer for src:libxml2 is Debian XML/SGML Group <debian-xml-sgml-pkgs@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 20 May 2017 09:24:01 UTC Severity: impor ...
Debian Bug report logs - #863018 libxml2: CVE-2017-9050: heap-based buffer overflow in xmlDictAddString Package: src:libxml2; Maintainer for src:libxml2 is Debian XML/SGML Group <debian-xml-sgml-pkgs@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 20 May 2017 09:03:02 UTC Se ...
libxml2 20904-GITv294-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dictc This vulnerability causes programs that use libxml2, such as PHP, to crash This vulnerability exists because of an incomplete fix for CVE-2016-1839 ...

Github Repositories

A Bookstore

README This README would normally document whatever steps are necessary to get the application up and running Things you may want to cover: Ruby version - 231 Rails version - 513 System dependencies Configuration Database creation Database initialization How to run the test suite - 'rails test' Services (job queues, cache servers, search engines,

A Simple CMS app

README This is the Rails 5 project I originally named it Lynda-Rails-5-Project, as it was part of the Ruby on Rails 5 Essential training This README would normally document whatever steps are necessary to get the application up and running This is a test project I do what I want Things you may want to cover: Ruby version System dependencies Configuration Database