Fluid Attacks Database

Description

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	libxml2	=2.9.14+dfsg-1.2 \|\| =2.9.14+dfsg-1.3~deb12u1 \|\| >=0 <2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u2
debian 13	libxml2	>=0 <2.12.7+dfsg+really2.9.14-0.4	2.12.7+dfsg+really2.9.14-0.4
debian 14	libxml2	>=0 <2.12.7+dfsg+really2.9.14-0.4	2.12.7+dfsg+really2.9.14-0.4
rpm rhel9.4	libxml2	<0:2.9.13-9.el9_4	0:2.9.13-9.el9_4
rpm rhel9	libxml2	<0:2.9.13-6.el9_5.1	0:2.9.13-6.el9_5.1
rpm rhel7	libxml2	-	-
rpm rhel8	libxml2	<0:2.9.7-18.el8_10.2	0:2.9.7-18.el8_10.2
rpm rhel9.2	libxml2	<0:2.9.13-3.el9_2.4	0:2.9.13-3.el9_2.4
rpm rhel8.8	libxml2	<0:2.9.7-16.el8_8.7	0:2.9.7-16.el8_8.7
rpm rhel6	libxml2	-	-

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.