Every CVE Search/ Get API key

CVE-2024-25062

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML...

7.5 HighFix available

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.31%Up 1.3 points since Feb 8, 2024
90%50%10%1%

What each source reports

NVD Score used 7.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
CVE-2024-25062
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
CVE List 7.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
CVE-2024-25062
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2024-22424 7.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
EUVD-2024-22424
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-x77r-6xxm-wjmx 7.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML...

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
GHSA-x77r-6xxm-wjmx
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVALPINE-CVE-2024-25062 7.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
ALPINE-CVE-2024-25062
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-34290 7.5

CVE-2024-25062 affecting package libxml2 for versions less than 2.10.4-4

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
AZL-34290
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 37 moreShow less
OSVAZL-34961 7.5

CVE-2024-25062 affecting package libxml2 for versions less than 2.11.5-4

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
AZL-34961
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVBELL-CVE-2024-25062 7.5
Record
BELL-CVE-2024-25062
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
CVE-2024-25062
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-25062 7.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
DEBIAN-CVE-2024-25062
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2025-83 7.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
JLSEC-2025-83
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1183 7.5

libxml2 security update

Library providing XML and HTML support.

Security Fix(es):

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.(CVE-2024-25062)

Record
OESA-2024-1183
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2679 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2024:2679
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:3299 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2024:3299
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:3303 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2024:3303
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:3625 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2024:3625
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:3626 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2024:3626
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-25062 7.5

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
UBUNTU-CVE-2024-25062
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:2679 No score

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: use-after-free in XMLReader (CVE-2024-25062)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:2679
Updated
2026-11-02
OSVALSA-2024:3626 No score

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: use-after-free in XMLReader (CVE-2024-25062)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3626
Updated
2026-11-02
OSVBIT-java-2024-25062 No score

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
BIT-java-2024-25062
Updated
2026-11-02
OSVBIT-java-min-2024-25062 No score

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
BIT-java-min-2024-25062
Updated
2026-11-02
OSVBIT-jre-2024-25062 No score

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Record
BIT-jre-2024-25062
Updated
2026-11-02
OSVCLSA-2024-1708416911 No score

libxml2: Fix of CVE-2024-25062

  • CVE-2024-25062: Fix use-after-free issue in libxml2 XML Reader interface with DTD validation and XInclude expansion enabled.
Record
CLSA-2024-1708416911
Updated
2026-11-02
OSVCLSA-2024-1708426314 No score

libxml2: Fix of CVE-2024-25062

  • CVE-2024-25062: Fix use-after-free issue in XML Reader interface
Record
CLSA-2024-1708426314
Updated
2026-11-02
OSVCLSA-2024-1708426517 No score

libxml2: Fix of CVE-2024-25062

  • CVE-2024-25062: Fix use-after-free issue in XML Reader interface
Record
CLSA-2024-1708426517
Updated
2026-11-02
OSVCLSA-2024-1708427636 No score

Fix CVE(s): CVE-2024-25062

  • SECURITY UPDATE: Use-after-free in xmlValidatePopElement()
    • debian/patches/CVE-2024-25062.patch: Fix use-after-free if XML Reader when used with DTD validation and XInclude expansion
    • CVE-2024-25062
Record
CLSA-2024-1708427636
Updated
2026-11-02
OSVCLSA-2024-1708427829 No score

Fix CVE(s): CVE-2024-25062

  • SECURITY UPDATE: Use-after-free in xmlValidatePopElement()
    • debian/patches/CVE-2024-25062.patch: Fix use-after-free if XML Reader with DTD validation and XInclude expansion by not expanding XIncludes when backtracking
    • CVE-2024-25062
Record
CLSA-2024-1708427829
Updated
2026-11-02
OSVCLSA-2024-1708639015 No score

libxml2: Fix of CVE-2024-25062

  • CVE-2024-25062: Fix xmlValidatePopElement use-after-free when processing crafted XML documents with DTD validation and XInclude expansion enabled
  • test suite was partially enabled
Record
CLSA-2024-1708639015
Updated
2026-11-02
OSVCLSA-2024-1708639232 No score

libxml2: Fix of CVE-2024-25062

  • CVE-2024-25062: Fix xmlValidatePopElement use-after-free in XML Reader interface with DTD validation and XInclude expansion enabled
  • test suite was partially activated
Record
CLSA-2024-1708639232
Updated
2026-11-02
OSVCLSA-2024-1718029281 No score

libxml2: Fix of CVE-2024-25062

  • CVE-2024-25062: Fix use-after-free issue in XML Reader interface
Record
CLSA-2024-1718029281
Updated
2026-11-02
OSVMGASA-2024-0172 No score

Updated libxml2 packages fix a security vulnerability

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free. (CVE-2024-25062)

Record
MGASA-2024-0172
Updated
2026-11-02
OSVopenSUSE-SU-2024:13676-1 No score

libxml2-2-2.11.6-2.1 on GA media

These are all security issues fixed in the libxml2-2-2.11.6-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13676-1
Updated
2026-11-02
OSVRLSA-2024:2679 No score

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: use-after-free in XMLReader (CVE-2024-25062)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:2679
Updated
2026-11-02
OSVRLSA-2024:3626 No score

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: use-after-free in XMLReader (CVE-2024-25062)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3626
Updated
2026-11-02
OSVSUSE-SU-2024:0461-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).
Record
SUSE-SU-2024:0461-1
Updated
2026-11-02
OSVSUSE-SU-2024:0461-2 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).
Record
SUSE-SU-2024:0461-2
Updated
2026-11-02
OSVSUSE-SU-2024:0555-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).
Record
SUSE-SU-2024:0555-1
Updated
2026-11-02
OSVSUSE-SU-2024:0556-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).
Record
SUSE-SU-2024:0556-1
Updated
2026-11-02
OSVSUSE-SU-2024:0613-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).
Record
SUSE-SU-2024:0613-1
Updated
2026-11-02
OSVSUSE-SU-2024:0613-2 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).
Record
SUSE-SU-2024:0613-2
Updated
2026-11-02
OSVUSN-6658-1 No score

libxml2 vulnerability

It was discovered that libxml2 incorrectly handled certain XML documents. A remote attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-6658-1
Updated
2026-11-02
OSVUSN-6658-2 No score

libxml2 vulnerability

USN-6658-1 fixed a vulnerability in libxml2. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that libxml2 incorrectly handled certain XML documents. A remote attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-6658-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libxml2
Alpine:v3.18
2.12.0 up to 2.11.7-r0
2.11.7-r0
libxml2
Alpine:v3.19
2.12.0 up to 2.11.7-r0
2.11.7-r0
libxml2
Alpine:v3.20
2.12.0 up to 2.12.5-r0
2.12.5-r0
libxml2
Alpine:v3.21
2.12.0 up to 2.12.5-r0
2.12.5-r0
libxml2
Alpine:v3.22
2.12.0 up to 2.12.5-r0
2.12.5-r0
libxml2
Alpine:v3.23
2.12.0 up to 2.12.5-r0
2.12.5-r0
libxml2
Alpine:v3.24
2.12.0 up to 2.12.5-r0
2.12.5-r0
qt6-qtwebengine
Alpine:v3.19
before 6.6.1-r9
6.6.1-r9
qt6-qtwebengine
Alpine:v3.20
before 6.6.3-r1
6.6.3-r1
qt6-qtwebengine
Alpine:v3.21
before 6.6.3-r1
6.6.3-r1
Show 169 moreShow less
Affected packages
PackageAffectedFixed
qt6-qtwebengine
Alpine:v3.22
before 6.6.3-r1
6.6.3-r1
qt6-qtwebengine
Alpine:v3.23
before 6.6.3-r1
6.6.3-r1
qt6-qtwebengine
Alpine:v3.24
before 6.6.3-r1
6.6.3-r1
libxml2
AlmaLinux:9
before 2.9.13-6.el9_4
2.9.13-6.el9_4
libxml2-devel
AlmaLinux:9
before 2.9.13-6.el9_4
2.9.13-6.el9_4
python3-libxml2
AlmaLinux:9
before 2.9.13-6.el9_4
2.9.13-6.el9_4
libxml2
AlmaLinux:8
before 2.9.7-18.el8_10.1
2.9.7-18.el8_10.1
libxml2-devel
AlmaLinux:8
before 2.9.7-18.el8_10.1
2.9.7-18.el8_10.1
python3-libxml2
AlmaLinux:8
before 2.9.7-18.el8_10.1
2.9.7-18.el8_10.1
libxml2
Azure Linux:2
before 2.10.4-4
2.10.4-4
libxml2
Azure Linux:3
before 2.11.5-4
2.11.5-4
libxml2
Alpaquita:23
2.10.3-r2 up to 2.10.4-r1
2.10.4-r1
libxml2
Alpaquita:stream
2.10.3-r2 up to 2.12.5-r0
2.12.5-r0
libxml2
BellSoft Hardened Containers:23
2.10.3-r2 up to 2.10.4-r1
2.10.4-r1
libxml2
BellSoft Hardened Containers:stream
2.10.3-r2 up to 2.12.5-r0
2.12.5-r0
java
Bitnami
before 1.8.0, 1.9.0 up to 8.0.431
1.8.08.0.431
java-min
Bitnami
before 1.8.0, 1.9.0 up to 8.0.431
1.8.08.0.431
jre
Bitnami
before 1.8.0, 1.9.0 up to 8.0.431
1.8.08.0.431
libxml2
TuxCare:AlmaLinux:9.2
before 2.9.13-3.el9_2.1.tuxcare.els1
2.9.13-3.el9_2.1.tuxcare.els1
libxml2-devel
TuxCare:AlmaLinux:9.2
before 2.9.13-3.el9_2.1.tuxcare.els1
2.9.13-3.el9_2.1.tuxcare.els1
libxml2-static
TuxCare:AlmaLinux:9.2
before 2.9.13-3.el9_2.1.tuxcare.els1
2.9.13-3.el9_2.1.tuxcare.els1
python3-libxml2
TuxCare:AlmaLinux:9.2
before 2.9.13-3.el9_2.1.tuxcare.els1
2.9.13-3.el9_2.1.tuxcare.els1
libxml2
TuxCare:CentOS:8.4
before 2.9.7-9.el8_4.2.tuxcare.els5
2.9.7-9.el8_4.2.tuxcare.els5
libxml2-devel
TuxCare:CentOS:8.4
before 2.9.7-9.el8_4.2.tuxcare.els5
2.9.7-9.el8_4.2.tuxcare.els5
libxml2-static
TuxCare:CentOS:8.4
before 2.9.7-9.el8_4.2.tuxcare.els5
2.9.7-9.el8_4.2.tuxcare.els5
python3-libxml2
TuxCare:CentOS:8.4
before 2.9.7-9.el8_4.2.tuxcare.els5
2.9.7-9.el8_4.2.tuxcare.els5
libxml2
TuxCare:CentOS:8.5
before 2.9.7-9.el8_4.2.tuxcare.els5
2.9.7-9.el8_4.2.tuxcare.els5
libxml2-devel
TuxCare:CentOS:8.5
before 2.9.7-9.el8_4.2.tuxcare.els5
2.9.7-9.el8_4.2.tuxcare.els5
libxml2-static
TuxCare:CentOS:8.5
before 2.9.7-9.el8_4.2.tuxcare.els5
2.9.7-9.el8_4.2.tuxcare.els5
python3-libxml2
TuxCare:CentOS:8.5
before 2.9.7-9.el8_4.2.tuxcare.els5
2.9.7-9.el8_4.2.tuxcare.els5
libxml2
TuxCare:Ubuntu:16.04
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
libxml2-dev
TuxCare:Ubuntu:16.04
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
libxml2-doc
TuxCare:Ubuntu:16.04
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
libxml2-utils
TuxCare:Ubuntu:16.04
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
python-libxml2
TuxCare:Ubuntu:16.04
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7
libxml2
TuxCare:Ubuntu:18.04
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
libxml2-dev
TuxCare:Ubuntu:18.04
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
libxml2-doc
TuxCare:Ubuntu:18.04
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
libxml2-utils
TuxCare:Ubuntu:18.04
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
python-libxml2
TuxCare:Ubuntu:18.04
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
python3-libxml2
TuxCare:Ubuntu:18.04
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1
libxml2
TuxCare:OracleLinux:6
before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5
libxml2-devel
TuxCare:OracleLinux:6
before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5
libxml2-python
TuxCare:OracleLinux:6
before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5
libxml2-static
TuxCare:OracleLinux:6
before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5
libxml2
TuxCare:CentOS:6
before 2.7.6-21.el6_8.1.tuxcare.els5
2.7.6-21.el6_8.1.tuxcare.els5
libxml2-devel
TuxCare:CentOS:6
before 2.7.6-21.el6_8.1.tuxcare.els5
2.7.6-21.el6_8.1.tuxcare.els5
libxml2-python
TuxCare:CentOS:6
before 2.7.6-21.el6_8.1.tuxcare.els5
2.7.6-21.el6_8.1.tuxcare.els5
libxml2-static
TuxCare:CentOS:6
before 2.7.6-21.el6_8.1.tuxcare.els5
2.7.6-21.el6_8.1.tuxcare.els5
libxml2
TuxCare:CentOS-Stream:8
before 2.9.7-18.el8.tuxcare.els1
2.9.7-18.el8.tuxcare.els1
libxml2-devel
TuxCare:CentOS-Stream:8
before 2.9.7-18.el8.tuxcare.els1
2.9.7-18.el8.tuxcare.els1
libxml2-static
TuxCare:CentOS-Stream:8
before 2.9.7-18.el8.tuxcare.els1
2.9.7-18.el8.tuxcare.els1
python3-libxml2
TuxCare:CentOS-Stream:8
before 2.9.7-18.el8.tuxcare.els1
2.9.7-18.el8.tuxcare.els1
libxml2
Debian:12
before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
libxml2
Debian:13
before 2.12.7+dfsg+really2.9.14-1
2.12.7+dfsg+really2.9.14-1
libxml2
Debian:14
before 2.12.7+dfsg+really2.9.14-1
2.12.7+dfsg+really2.9.14-1
libxml2
Debian:11
From an advisory covering 7 CVEs
before 2.9.10+dfsg-6.7+deb11u6, plus listed versions
2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u12.9.10+dfsg-6.7+deb11u22.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u42.9.10+dfsg-6.7+deb11u5
2.9.10+dfsg-6.7+deb11u6
libxml2
Debian:12
From an advisory covering 10 CVEs
before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
XML2_jll
Julia
before 2.12.5+0
2.12.5+0
libxml2
Mageia:9
before 2.10.4-1.3.mga9
2.10.4-1.3.mga9
libxml2
openEuler:20.03-LTS-SP1
before 2.9.10-37.oe1
2.9.10-37.oe1
libxml2
openEuler:20.03-LTS-SP4
before 2.9.10-39.oe2003sp4
2.9.10-39.oe2003sp4
libxml2
openEuler:22.03-LTS
before 2.9.14-10.oe2203sp3
2.9.14-10.oe2203sp3
libxml2
openEuler:22.03-LTS-SP1
before 2.9.14-10.oe2203sp1
2.9.14-10.oe2203sp1
libxml2
openEuler:22.03-LTS-SP2
before 2.9.14-10.oe2203sp2
2.9.14-10.oe2203sp2
libxml2
openEuler:22.03-LTS-SP3
before 2.9.14-10.oe2203sp3
2.9.14-10.oe2203sp3
libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
libxml2-debugsource
Red Hat:enterprise_linux:9::appstream
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
libxml2-devel
Red Hat:enterprise_linux:9::appstream
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
libxml2
Red Hat:enterprise_linux:9::baseos
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
libxml2-debugsource
Red Hat:enterprise_linux:9::baseos
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
python3-libxml2
Red Hat:enterprise_linux:9::baseos
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
libxml2-debuginfo
Red Hat:rhel_eus:8.6::appstream
before 0:2.9.7-13.el8_6.5
0:2.9.7-13.el8_6.5
libxml2-debugsource
Red Hat:rhel_eus:8.6::appstream
before 0:2.9.7-13.el8_6.5
0:2.9.7-13.el8_6.5
libxml2-devel
Red Hat:rhel_eus:8.6::appstream
before 0:2.9.7-13.el8_6.5
0:2.9.7-13.el8_6.5
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.6::appstream
before 0:2.9.7-13.el8_6.5
0:2.9.7-13.el8_6.5
libxml2
Red Hat:rhel_eus:8.6::baseos
before 0:2.9.7-13.el8_6.5
0:2.9.7-13.el8_6.5
libxml2-debuginfo
Red Hat:rhel_eus:8.6::baseos
before 0:2.9.7-13.el8_6.5
0:2.9.7-13.el8_6.5
libxml2-debugsource
Red Hat:rhel_eus:8.6::baseos
before 0:2.9.7-13.el8_6.5
0:2.9.7-13.el8_6.5
python3-libxml2
Red Hat:rhel_eus:8.6::baseos
before 0:2.9.7-13.el8_6.5
0:2.9.7-13.el8_6.5
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.6::baseos
before 0:2.9.7-13.el8_6.5
0:2.9.7-13.el8_6.5
libxml2-debuginfo
Red Hat:rhel_eus:8.8::appstream
before 0:2.9.7-16.el8_8.4
0:2.9.7-16.el8_8.4
libxml2-debugsource
Red Hat:rhel_eus:8.8::appstream
before 0:2.9.7-16.el8_8.4
0:2.9.7-16.el8_8.4
libxml2-devel
Red Hat:rhel_eus:8.8::appstream
before 0:2.9.7-16.el8_8.4
0:2.9.7-16.el8_8.4
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.8::appstream
before 0:2.9.7-16.el8_8.4
0:2.9.7-16.el8_8.4
libxml2
Red Hat:rhel_eus:8.8::baseos
before 0:2.9.7-16.el8_8.4
0:2.9.7-16.el8_8.4
libxml2-debuginfo
Red Hat:rhel_eus:8.8::baseos
before 0:2.9.7-16.el8_8.4
0:2.9.7-16.el8_8.4
libxml2-debugsource
Red Hat:rhel_eus:8.8::baseos
before 0:2.9.7-16.el8_8.4
0:2.9.7-16.el8_8.4
python3-libxml2
Red Hat:rhel_eus:8.8::baseos
before 0:2.9.7-16.el8_8.4
0:2.9.7-16.el8_8.4
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.8::baseos
before 0:2.9.7-16.el8_8.4
0:2.9.7-16.el8_8.4
libxml2-debuginfo
Red Hat:rhel_eus:9.2::appstream
before 0:2.9.13-3.el9_2.3
0:2.9.13-3.el9_2.3
libxml2-debugsource
Red Hat:rhel_eus:9.2::appstream
before 0:2.9.13-3.el9_2.3
0:2.9.13-3.el9_2.3
libxml2-devel
Red Hat:rhel_eus:9.2::appstream
before 0:2.9.13-3.el9_2.3
0:2.9.13-3.el9_2.3
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.2::appstream
before 0:2.9.13-3.el9_2.3
0:2.9.13-3.el9_2.3
libxml2
Red Hat:rhel_eus:9.2::baseos
before 0:2.9.13-3.el9_2.3
0:2.9.13-3.el9_2.3
libxml2-debuginfo
Red Hat:rhel_eus:9.2::baseos
before 0:2.9.13-3.el9_2.3
0:2.9.13-3.el9_2.3
libxml2-debugsource
Red Hat:rhel_eus:9.2::baseos
before 0:2.9.13-3.el9_2.3
0:2.9.13-3.el9_2.3
python3-libxml2
Red Hat:rhel_eus:9.2::baseos
before 0:2.9.13-3.el9_2.3
0:2.9.13-3.el9_2.3
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.2::baseos
before 0:2.9.13-3.el9_2.3
0:2.9.13-3.el9_2.3
libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
libxml2-debugsource
Red Hat:enterprise_linux:8::appstream
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
libxml2-devel
Red Hat:enterprise_linux:8::appstream
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
libxml2
Red Hat:enterprise_linux:8::baseos
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
libxml2-debugsource
Red Hat:enterprise_linux:8::baseos
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
python3-libxml2
Red Hat:enterprise_linux:8::baseos
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
libxml2
Rocky Linux:9
before 0:2.9.13-6.el9_4
0:2.9.13-6.el9_4
libxml2
Rocky Linux:8
before 0:2.9.7-18.el8_10.1
0:2.9.7-18.el8_10.1
libxml2
SUSE:Linux Enterprise Micro 5.1
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
libxml2
SUSE:Linux Enterprise Micro 5.2
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
python-libxml2-python
SUSE:Linux Enterprise Micro 5.2
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
python-libxml2-python
openSUSE:Leap 15.5
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
libxml2
SUSE:Linux Enterprise Server 15 SP2-LTSS
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
python-libxml2-python
SUSE:Linux Enterprise Server 15 SP2-LTSS
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
libxml2
SUSE:Linux Enterprise Server 15 SP3-LTSS
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
python-libxml2-python
SUSE:Linux Enterprise Server 15 SP3-LTSS
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
libxml2
SUSE:Enterprise Storage 7.1
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
python-libxml2-python
SUSE:Enterprise Storage 7.1
before 2.9.7-150000.3.66.1
2.9.7-150000.3.66.1
libxml2
SUSE:Linux Enterprise Micro 5.5
before 2.10.3-150500.5.14.1
2.10.3-150500.5.14.1
libxml2-python
SUSE:Linux Enterprise Micro 5.5
before 2.10.3-150500.5.14.1
2.10.3-150500.5.14.1
libxml2
SUSE:Linux Enterprise Module for Basesystem 15 SP5
before 2.10.3-150500.5.14.1
2.10.3-150500.5.14.1
libxml2-python
SUSE:Linux Enterprise Module for Basesystem 15 SP5
before 2.10.3-150500.5.14.1
2.10.3-150500.5.14.1
libxml2-python
SUSE:Linux Enterprise Module for Python 3 15 SP5
before 2.10.3-150500.5.14.1
2.10.3-150500.5.14.1
libxml2
openSUSE:Leap 15.5
before 2.10.3-150500.5.14.1
2.10.3-150500.5.14.1
libxml2-python
openSUSE:Leap 15.5
before 2.10.3-150500.5.14.1
2.10.3-150500.5.14.1
libxml2
SUSE:Linux Enterprise Software Development Kit 12 SP5
before 2.9.4-46.71.1
2.9.4-46.71.1
libxml2
SUSE:Linux Enterprise Server 12 SP5
before 2.9.4-46.71.1
2.9.4-46.71.1
python-libxml2
SUSE:Linux Enterprise Server 12 SP5
before 2.9.4-46.71.1
2.9.4-46.71.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
before 2.9.4-46.71.1
2.9.4-46.71.1
python-libxml2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
before 2.9.4-46.71.1
2.9.4-46.71.1
libxml2
SUSE:Linux Enterprise Micro 5.3
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
SUSE:Linux Enterprise Micro 5.3
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
SUSE:Linux Enterprise Micro 5.4
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
SUSE:Linux Enterprise Micro 5.4
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
openSUSE:Leap Micro 5.3
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
openSUSE:Leap Micro 5.3
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
openSUSE:Leap Micro 5.4
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
openSUSE:Leap Micro 5.4
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
SUSE:Linux Enterprise Server 15 SP4-LTSS
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
SUSE:Linux Enterprise Server 15 SP4-LTSS
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
SUSE:Manager Proxy 4.3
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
SUSE:Manager Proxy 4.3
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
SUSE:Manager Server 4.3
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2-python
SUSE:Manager Server 4.3
before 2.9.14-150400.5.28.1
2.9.14-150400.5.28.1
libxml2
Ubuntu:Pro:14.04:LTS
before 2.9.1+dfsg1-3ubuntu4.13+esm6, plus listed versions
2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2
Show 16 moreShow less
2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm5
2.9.1+dfsg1-3ubuntu4.13+esm6
libxml2
Ubuntu:Pro:16.04:LTS
before 2.9.3+dfsg1-1ubuntu0.7+esm6, plus listed versions
2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1
Show 12 moreShow less
2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm5
2.9.3+dfsg1-1ubuntu0.7+esm6
libxml2
Ubuntu:Pro:18.04:LTS
before 2.9.4+dfsg1-6.1ubuntu1.9+esm1, plus listed versions
2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1
Show 9 moreShow less
2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.9
2.9.4+dfsg1-6.1ubuntu1.9+esm1
libxml2
Ubuntu:20.04:LTS
before 2.9.10+dfsg-5ubuntu0.20.04.7, plus listed versions
2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3
Show 9 moreShow less
2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.6
2.9.10+dfsg-5ubuntu0.20.04.7
libxml2
Ubuntu:22.04:LTS
before 2.9.13+dfsg-1ubuntu0.4, plus listed versions
2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build12.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.3
2.9.13+dfsg-1ubuntu0.4
libxml2
openSUSE:Tumbleweed
before 2.11.6-2.1
2.11.6-2.1

History

History
RecordedChangedSources
affected
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-25062 is a high vulnerability (CVSS 7.5) in Xmlsoft Libxml2, published February 4, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 70th percentile. Fixed in libxml2 2.11.7-r0.

References

Show 51 moreShow less
MoveEnter Open