Every CVE Search/ Get API key

CVE-2023-39615

Xmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the...

6.5 MediumFix availableDisputed

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.08%Up 1.0 points since Aug 30, 2023
90%50%10%1%

What each source reports

NVD Score used 6.5

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Record
CVE-2023-39615
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Record
CVE-2023-39615
Updated
2026-11-02
EUVDEUVD-2023-43324 No score

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Record
EUVD-2023-43324
Updated
2026-11-02
GitHub AdvisoriesGHSA-9fj4-8443-vg2m 6.5

Xmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the...

Xmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file.

Record
GHSA-9fj4-8443-vg2m
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
OSVDEBIAN-CVE-2023-39615 6.5

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Record
DEBIAN-CVE-2023-39615
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2025-81 6.5

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the...

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Record
JLSEC-2025-81
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 15 moreShow less
OSVRHSA-2023:7544 6.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2023:7544
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:7747 6.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2023:7747
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:0119 6.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2024:0119
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:0413 7.8

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2024:0413
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2024:0119 6.5

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:0119
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2023:7747 No score

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:7747
Updated
2026-11-02
OSVALSA-2024:0119 No score

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:0119
Updated
2026-11-02
OSV No score

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

Record
CVE-2023-39615
Updated
2026-11-02
OSVMGASA-2023-0279 No score

Updated libxml2 packages fix a security vulnerability

The updated packages fix a security vulnerability:

Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. (CVE-2023-39615).

Record
MGASA-2023-0279
Updated
2026-11-02
OSVopenSUSE-SU-2024:13192-1 No score

libxml2-2-2.10.4-3.1 on GA media

These are all security issues fixed in the libxml2-2-2.10.4-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13192-1
Updated
2026-11-02
OSVSUSE-SU-2023:3665-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2023-29469: Fixed not deterministic hashing of empty dict strings (bsc#1210412).
  • CVE-2023-28484: Fixed NULL dereference in xmlSchemaFixupComplexType (bsc#1210411).
  • CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).
  • CVE-2016-3709: Fixed cross-site scripting vulnerability in libxml (bsc#1201978).
Record
SUSE-SU-2023:3665-1
Updated
2026-11-02
OSVSUSE-SU-2023:3666-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).
Record
SUSE-SU-2023:3666-1
Updated
2026-11-02
OSVSUSE-SU-2023:3666-2 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).
Record
SUSE-SU-2023:3666-2
Updated
2026-11-02
OSVSUSE-SU-2023:3698-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).
Record
SUSE-SU-2023:3698-1
Updated
2026-11-02
OSVSUSE-SU-2023:3699-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).
Record
SUSE-SU-2023:3699-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libxml2
AlmaLinux:9
 before 2.9.13-5.el9_3
2.9.13-5.el9_3
libxml2-devel
AlmaLinux:9
 before 2.9.13-5.el9_3
2.9.13-5.el9_3
python3-libxml2
AlmaLinux:9
 before 2.9.13-5.el9_3
2.9.13-5.el9_3
libxml2
AlmaLinux:8
 before 2.9.7-18.el8_9
2.9.7-18.el8_9
libxml2-devel
AlmaLinux:8
 before 2.9.7-18.el8_9
2.9.7-18.el8_9
python3-libxml2
AlmaLinux:8
 before 2.9.7-18.el8_9
2.9.7-18.el8_9
libxml2
Debian:12
 before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
libxml2
Debian:13
 before 2.12.7+dfsg+really2.9.14-1
2.12.7+dfsg+really2.9.14-1
libxml2
Debian:14
 before 2.12.7+dfsg+really2.9.14-1
2.12.7+dfsg+really2.9.14-1
libxml2
Debian:11
From an advisory covering 7 CVEs
 before 2.9.10+dfsg-6.7+deb11u6, plus listed versions
2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u12.9.10+dfsg-6.7+deb11u22.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u42.9.10+dfsg-6.7+deb11u5
2.9.10+dfsg-6.7+deb11u6
Show 97 moreShow less
Affected packages
PackageAffectedFixed
libxml2
Debian:12
From an advisory covering 10 CVEs
 before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
XML2_jll
Julia
 2.11.5+0 up to 2.12.0+0
2.12.0+0
libxml2
Mageia:8
 before 2.9.10-7.8.mga8
2.9.10-7.8.mga8
libxml2
Mageia:9
 before 2.10.4-1.1.mga9
2.10.4-1.1.mga9
libxml2-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 0:2.9.7-16.el8_8.2
0:2.9.7-16.el8_8.2
libxml2-debugsource
Red Hat:rhel_eus:8.8::appstream
 before 0:2.9.7-16.el8_8.2
0:2.9.7-16.el8_8.2
libxml2-devel
Red Hat:rhel_eus:8.8::appstream
 before 0:2.9.7-16.el8_8.2
0:2.9.7-16.el8_8.2
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 0:2.9.7-16.el8_8.2
0:2.9.7-16.el8_8.2
libxml2
Red Hat:rhel_eus:8.8::baseos
 before 0:2.9.7-16.el8_8.2
0:2.9.7-16.el8_8.2
libxml2-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 0:2.9.7-16.el8_8.2
0:2.9.7-16.el8_8.2
libxml2-debugsource
Red Hat:rhel_eus:8.8::baseos
 before 0:2.9.7-16.el8_8.2
0:2.9.7-16.el8_8.2
python3-libxml2
Red Hat:rhel_eus:8.8::baseos
 before 0:2.9.7-16.el8_8.2
0:2.9.7-16.el8_8.2
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 0:2.9.7-16.el8_8.2
0:2.9.7-16.el8_8.2
libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.9.13-5.el9_3
0:2.9.13-5.el9_3
libxml2-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:2.9.13-5.el9_3
0:2.9.13-5.el9_3
libxml2-devel
Red Hat:enterprise_linux:9::appstream
 before 0:2.9.13-5.el9_3
0:2.9.13-5.el9_3
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.9.13-5.el9_3
0:2.9.13-5.el9_3
libxml2
Red Hat:enterprise_linux:9::baseos
 before 0:2.9.13-5.el9_3
0:2.9.13-5.el9_3
libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:2.9.13-5.el9_3
0:2.9.13-5.el9_3
libxml2-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:2.9.13-5.el9_3
0:2.9.13-5.el9_3
python3-libxml2
Red Hat:enterprise_linux:9::baseos
 before 0:2.9.13-5.el9_3
0:2.9.13-5.el9_3
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:2.9.13-5.el9_3
0:2.9.13-5.el9_3
libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
libxml2-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
libxml2-devel
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
libxml2
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
libxml2-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
python3-libxml2
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
libxml2-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:2.9.7-13.el8_6.4
0:2.9.7-13.el8_6.4
libxml2-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:2.9.7-13.el8_6.4
0:2.9.7-13.el8_6.4
libxml2-devel
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:2.9.7-13.el8_6.4
0:2.9.7-13.el8_6.4
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 5 CVEs
 before 0:2.9.7-13.el8_6.4
0:2.9.7-13.el8_6.4
libxml2
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-13.el8_6.4
0:2.9.7-13.el8_6.4
libxml2-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-13.el8_6.4
0:2.9.7-13.el8_6.4
libxml2-debugsource
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-13.el8_6.4
0:2.9.7-13.el8_6.4
python3-libxml2
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-13.el8_6.4
0:2.9.7-13.el8_6.4
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 5 CVEs
 before 0:2.9.7-13.el8_6.4
0:2.9.7-13.el8_6.4
libxml2
Rocky Linux:8
 before 0:2.9.7-18.el8_9
0:2.9.7-18.el8_9
libxml2
Rocky Linux:8
 before 0:2.9.7-18.el8
0:2.9.7-18.el8
libxml2
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 4 CVEs
 before 2.9.4-46.65.1
2.9.4-46.65.1
libxml2
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 2.9.4-46.65.1
2.9.4-46.65.1
python-libxml2
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 2.9.4-46.65.1
2.9.4-46.65.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 2.9.4-46.65.1
2.9.4-46.65.1
python-libxml2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 2.9.4-46.65.1
2.9.4-46.65.1
libxml2
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 2.10.3-150500.5.8.1
2.10.3-150500.5.8.1
libxml2-python
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 2.10.3-150500.5.8.1
2.10.3-150500.5.8.1
libxml2-python
SUSE:Linux Enterprise Module for Python 3 15 SP5
 before 2.10.3-150500.5.8.1
2.10.3-150500.5.8.1
libxml2
openSUSE:Leap 15.5
 before 2.10.3-150500.5.8.1
2.10.3-150500.5.8.1
libxml2-python
openSUSE:Leap 15.5
 before 2.10.3-150500.5.8.1
2.10.3-150500.5.8.1
libxml2
SUSE:Linux Enterprise Micro 5.5
 before 2.10.3-150500.5.8.1
2.10.3-150500.5.8.1
libxml2-python
SUSE:Linux Enterprise Micro 5.5
 before 2.10.3-150500.5.8.1
2.10.3-150500.5.8.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Manager Proxy 4.2
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Manager Proxy 4.2
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Manager Server 4.2
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Manager Server 4.2
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise Micro 5.1
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise Micro 5.2
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Linux Enterprise Micro 5.2
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Enterprise Storage 7
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Enterprise Storage 7
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Enterprise Storage 7.1
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
SUSE:Enterprise Storage 7.1
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
openSUSE:Leap 15.4
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
python-libxml2-python
openSUSE:Leap 15.5
 before 2.9.7-150000.3.60.1
2.9.7-150000.3.60.1
libxml2
SUSE:Linux Enterprise Micro 5.3
 before 2.9.14-150400.5.22.1
2.9.14-150400.5.22.1
libxml2-python
SUSE:Linux Enterprise Micro 5.3
 before 2.9.14-150400.5.22.1
2.9.14-150400.5.22.1
libxml2
SUSE:Linux Enterprise Micro 5.4
 before 2.9.14-150400.5.22.1
2.9.14-150400.5.22.1
libxml2-python
SUSE:Linux Enterprise Micro 5.4
 before 2.9.14-150400.5.22.1
2.9.14-150400.5.22.1
libxml2
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 2.9.14-150400.5.22.1
2.9.14-150400.5.22.1
libxml2-python
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 2.9.14-150400.5.22.1
2.9.14-150400.5.22.1
libxml2-python
SUSE:Linux Enterprise Module for Python 3 15 SP4
 before 2.9.14-150400.5.22.1
2.9.14-150400.5.22.1
libxml2
openSUSE:Leap 15.4
 before 2.9.14-150400.5.22.1
2.9.14-150400.5.22.1
libxml2-python
openSUSE:Leap 15.4
 before 2.9.14-150400.5.22.1
2.9.14-150400.5.22.1
libxml2
openSUSE:Tumbleweed
 before 2.10.4-3.1
2.10.4-3.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-39615 is a medium vulnerability (CVSS 6.5) in Xmlsoft Libxml2, published August 29, 2023. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in libxml2 2.9.13-5.el9_3.

References

Show 52 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open