Fluid Attacks Database

Description

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	libxml2	>=0 <2.12.7+dfsg+really2.9.14-0.4	2.12.7+dfsg+really2.9.14-0.4
alpine v3.20	libxml2	>=2.13.0 <2.12.7-r2	2.12.7-r2
alpine v3.18	libxml2	>=2.13.0 <2.11.8-r2	2.11.8-r2
alpine v3.19	libxml2	>=2.13.0 <2.11.8-r2	2.11.8-r2
alpine v3.21	libxml2	>=2.13.0 <2.13.4-r5	2.13.4-r5
alpine v3.22	libxml2	>=2.13.0 <2.13.6-r0	2.13.6-r0
debian 13	libxml2	>=0 <2.12.7+dfsg+really2.9.14-0.4	2.12.7+dfsg+really2.9.14-0.4
debian 12	libxml2	=2.9.14+dfsg-1.2 \|\| =2.9.14+dfsg-1.3~deb12u1 \|\| >=0 <2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u2
rpm rhel10	libxml2	-	-
rpm rhel7	libxml2	-	-

1-10 of 15

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.