Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1008-1 | libxml2 security update |
Debian DSA |
DSA-3952-1 | libxml2 security update |
EUVD |
EUVD-2017-0361 | libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839. |
Github GHSA |
GHSA-8c56-cpmw-89x7 | Out-of-bounds read in nokogiri |
Ubuntu USN |
USN-3424-1 | libxml2 vulnerabilities |
Ubuntu USN |
USN-3424-2 | libxml2 vulnerabilities |
Wed, 17 Dec 2025 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-122 | |
| Metrics |
cvssV3_1
|
Fri, 11 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-12-17T22:10:56.955Z
Reserved: 2017-05-18T00:00:00.000Z
Link: CVE-2017-9050
Updated: 2024-08-05T16:55:21.957Z
Status : Modified
Published: 2017-05-18T06:29:00.497
Modified: 2026-05-13T00:24:29.033
Link: CVE-2017-9050
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
EUVD
Github GHSA
Ubuntu USN