Every CVE Search/ Get API key

CVE-2024-56171

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in...

7.8 HighFix available

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

1.18%Up 1.1 points since Feb 19, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
CVE-2024-56171
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2025-4769 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
EUVD-2025-4769
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-m366-8h8r-6fqr 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in...

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
GHSA-m366-8h8r-6fqr
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-416
Updated
2026-11-02
NVD 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
CVE-2024-56171
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVALPINE-CVE-2024-56171 9.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
ALPINE-CVE-2024-56171
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2024-56171 9.8
Record
BELL-CVE-2024-56171
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 45 moreShow less
OSV 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
CVE-2024-56171
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-416
Updated
2026-11-02
OSVDEBIAN-CVE-2024-56171 9.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
DEBIAN-CVE-2024-56171
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVJLSEC-2025-86 9.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables...

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
JLSEC-2025-86
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1225 7.8

libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.

Security Fix(es):

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2024-56171)

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.(CVE-2025-24928)

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.(CVE-2025-27113)

Record
OESA-2025-1225
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHBA-2025:6597 9.1

Red Hat Bug Fix Advisory: libxml2 bug fix and enhancement update

Record
RHBA-2025:6597
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2482 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2482
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2483 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2483
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2507 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2507
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2513 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2513
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2654 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2654
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2660 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2660
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2673 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2673
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2678 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2678
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2679 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2679
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2686 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2686
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:2679 8.1

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Use-After-Free in libxml2 (CVE-2024-56171)

  • libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:2679
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:2686 8.1

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Use-After-Free in libxml2 (CVE-2024-56171)

  • libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:2686
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-ALPINE-315-CVE-2024-56171 9.8

CVE-2024-56171 in libxml2 - Patched by Root

Root has patched CVE-2024-56171 in the libxml2 package for Root:Alpine:3.15. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-315-CVE-2024-56171
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-56171 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
UBUNTU-CVE-2024-56171
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:2679 No score

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Use-After-Free in libxml2 (CVE-2024-56171)
  • libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:2679
Updated
2026-11-02
OSVALSA-2025:2686 No score

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Use-After-Free in libxml2 (CVE-2024-56171)
  • libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:2686
Updated
2026-11-02
OSVAZL-56925 No score

CVE-2024-56171 affecting package libxml2 for versions less than 2.10.4-6

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
AZL-56925
Updated
2026-11-02
OSVAZL-57010 No score

CVE-2024-56171 affecting package libxml2 for versions less than 2.11.5-4

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
AZL-57010
Updated
2026-11-05
OSVBIT-java-2024-56171 No score

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
BIT-java-2024-56171
Updated
2026-11-02
OSVBIT-java-min-2024-56171 No score

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
BIT-java-min-2024-56171
Updated
2026-11-02
OSVBIT-jre-2024-56171 No score

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Record
BIT-jre-2024-56171
Updated
2026-11-02
OSVCLSA-2025-1741286239 No score

Fix of 5 CVEs

  • SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext
    • debian/patches/CVE-2024-34459.patch: Fix buffer overread with xmllint --htmlout by adding a missing bounds check
    • CVE-2024-34459
  • SECURITY UPDATE: use-after-free vulnerability in xinclude.c
    • debian/patches/CVE-2022-49043.patch: Fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free
    • CVE-2022-49043
  • SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in valid.c
    • debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in xmlSnprintfElements caused by improperly calculating qname length
    • CVE-2025-24928
  • SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c
    • debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child axis to generate XML_OP_ELEM like the case without an axis
    • CVE-2025-27113
  • SECURITY UPDATE: use-after-free vulnerability in XML schema processing
    • debian/patches/CVE-2024-56171.patch: Fix use-after-free after xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables
    • CVE-2024-56171
Record
CLSA-2025-1741286239
Updated
2026-11-02
OSVCLSA-2025-1741286348 No score

Fix of 5 CVEs

  • SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext
    • debian/patches/CVE-2024-34459.patch: Fix buffer overread with xmllint --htmlout by adding a missing bounds check
    • CVE-2024-34459
  • SECURITY UPDATE: use-after-free vulnerability in xinclude.c
    • debian/patches/CVE-2022-49043.patch: Fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free
    • CVE-2022-49043
  • SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in valid.c
    • debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in xmlSnprintfElements caused by improperly calculating qname length
    • CVE-2025-24928
  • SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c
    • debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child axis to generate XML_OP_ELEM like the case without an axis
    • CVE-2025-27113
  • SECURITY UPDATE: use-after-free vulnerability in XML schema processing
    • debian/patches/CVE-2024-56171.patch: Fix use-after-free after xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables
    • CVE-2024-56171
Record
CLSA-2025-1741286348
Updated
2026-11-02
OSVCLSA-2025-1742379480 No score

libxml2: Fix of 2 CVEs

  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
Record
CLSA-2025-1742379480
Updated
2026-11-02
OSVCLSA-2025-1742466508 No score

libxml2: Fix of 2 CVEs

  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
Record
CLSA-2025-1742466508
Updated
2026-11-02
OSVCLSA-2025-1742466608 No score

libxml2: Fix of 2 CVEs

  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
Record
CLSA-2025-1742466608
Updated
2026-11-02
OSVCLSA-2025-1743409093 No score

libxml2: Fix of CVE-2024-56171

  • CVE-2024-56171: Fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
Record
CLSA-2025-1743409093
Updated
2026-11-02
OSVCLSA-2025-1755708467 No score

libxml2: Fix of 2 CVEs

  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
Record
CLSA-2025-1755708467
Updated
2026-11-02
OSVCLSA-2025-1761261543 No score

Fix CVE(s): CVE-2024-56171

  • SECURITY UPDATE: use-after-free vulnerability in XML schema processing
    • debian/patches/CVE-2024-56171.patch: Fix use-after-free after xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables
    • CVE-2024-56171
Record
CLSA-2025-1761261543
Updated
2026-11-02
OSVCLSA-2025-1761859779 No score

libxml2: Fix of 2 CVEs

  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
Record
CLSA-2025-1761859779
Updated
2026-11-02
OSVCLSA-2025-1763031933 No score

libxml2: Fix of 3 CVEs

  • CVE-2025-9714: additional fixes
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
Record
CLSA-2025-1763031933
Updated
2026-11-02
OSVMGASA-2025-0073 No score

Updated libxml2 packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Use-after-free in xmlSchemaIDCFillNodeTables. (CVE-2024-56171) Stack-buffer-overflow in xmlSnprintfElements. (CVE-2025-24928) Null-deref in xmlPatMatch. (CVE-2025-27113)

Record
MGASA-2025-0073
Updated
2026-11-02
OSVopenSUSE-SU-2025:14830-1 No score

libxml2-2-2.13.6-1.1 on GA media

These are all security issues fixed in the libxml2-2-2.13.6-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14830-1
Updated
2026-11-02
OSVSUSE-SU-2025:0746-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418).
Record
SUSE-SU-2025:0746-1
Updated
2026-11-02
OSVSUSE-SU-2025:0747-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418).
Record
SUSE-SU-2025:0747-1
Updated
2026-11-02
OSVSUSE-SU-2025:0748-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418).
Record
SUSE-SU-2025:0748-1
Updated
2026-11-02
OSVSUSE-SU-2025:0976-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: Fixed NULL Pointer Dereference in libxml2 xmlPatMatch (bsc#1237418).
Record
SUSE-SU-2025:0976-1
Updated
2026-11-02
OSVSUSE-SU-2025:20177-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: Fixed NULL Pointer Dereference in xmlPatMatch (bsc#1237418).
Record
SUSE-SU-2025:20177-1
Updated
2026-11-02
OSVSUSE-SU-2025:20274-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c [bsc#1237363]
  • CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c [bsc#1237370]
  • CVE-2025-27113: Fixed NULL Pointer Dereference in libxml2 xmlPatMatch [bsc#1237418]
Record
SUSE-SU-2025:20274-1
Updated
2026-11-02
OSVUSN-7302-1 No score

libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain memory operations. A remote attacker could use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2022-49043)

It was discovered that the libxml2 xmllint tool incorrectly handled certain memory operations. If a user or automated system were tricked into running xmllint on a specially crafted xml file, a remote attacker could cause xmllint to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2024-34459)

It was discovered that libxml2 did not properly manage memory. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-56171)

It was discovered that libxml2 could be made to write out of bounds. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-24928)

It was discovered that libxml2 could be made to dereference invalid memory. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-27113)

Record
USN-7302-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libxml2
Alpine:v3.18
 2.13.0 up to 2.11.8-r1
2.11.8-r1
libxml2
Alpine:v3.19
 2.13.0 up to 2.11.8-r1
2.11.8-r1
libxml2
Alpine:v3.20
 2.13.0 up to 2.12.7-r1
2.12.7-r1
libxml2
Alpine:v3.21
 2.13.0 up to 2.13.4-r4
2.13.4-r4
libxml2
Alpine:v3.22
 2.13.0 up to 2.13.6-r0
2.13.6-r0
libxml2
Alpine:v3.23
 2.13.0 up to 2.13.6-r0
2.13.6-r0
libxml2
Alpine:v3.24
 2.13.0 up to 2.13.6-r0
2.13.6-r0
libxml2
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.13-6.el9_5.2
2.9.13-6.el9_5.2
libxml2-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.13-6.el9_5.2
2.9.13-6.el9_5.2
python3-libxml2
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.13-6.el9_5.2
2.9.13-6.el9_5.2
Show 264 moreShow less
Affected packages
PackageAffectedFixed
libxml2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.7-19.el8_10
2.9.7-19.el8_10
libxml2-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.7-19.el8_10
2.9.7-19.el8_10
python3-libxml2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.7-19.el8_10
2.9.7-19.el8_10
libxml2
Azure Linux:2
 before 2.10.4-6
2.10.4-6
libxml2
Azure Linux:3
 before 2.11.5-4
2.11.5-4
libxml2
Alpaquita:23
 2.10.3-r2 up to 2.10.4-r2
2.10.4-r2
libxml2
Alpaquita:stream
 2.10.3-r2 up to 2.13.6-r0
2.13.6-r0
libxml2
BellSoft Hardened Containers:23
 2.10.3-r2 up to 2.10.4-r2
2.10.4-r2
libxml2
BellSoft Hardened Containers:stream
 2.10.3-r2 up to 2.13.6-r0
2.13.6-r0
java
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
java-min
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
jre
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
libxml2
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
libxml2-dev
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
libxml2-doc
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
libxml2-utils
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
python-libxml2
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
libxml2-dev
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
libxml2-doc
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
libxml2-utils
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
python-libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
python3-libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
libxml2
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2-devel
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2-static
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
python3-libxml2
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 2.9.7-18.el8.tuxcare.els3
2.9.7-18.el8.tuxcare.els3
libxml2-devel
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 2.9.7-18.el8.tuxcare.els3
2.9.7-18.el8.tuxcare.els3
libxml2-static
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 2.9.7-18.el8.tuxcare.els3
2.9.7-18.el8.tuxcare.els3
python3-libxml2
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 2.9.7-18.el8.tuxcare.els3
2.9.7-18.el8.tuxcare.els3
libxml2
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
python3-libxml2
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els5
2.9.13-3.el9_2.1.tuxcare.els5
libxml2-devel
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els5
2.9.13-3.el9_2.1.tuxcare.els5
libxml2-static
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els5
2.9.13-3.el9_2.1.tuxcare.els5
python3-libxml2
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els5
2.9.13-3.el9_2.1.tuxcare.els5
libxml2
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.9.1-6.0.3.el7_9.6.tuxcare.els6
2.9.1-6.0.3.el7_9.6.tuxcare.els6
libxml2-devel
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.9.1-6.0.3.el7_9.6.tuxcare.els6
2.9.1-6.0.3.el7_9.6.tuxcare.els6
libxml2-python
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.9.1-6.0.3.el7_9.6.tuxcare.els6
2.9.1-6.0.3.el7_9.6.tuxcare.els6
libxml2-static
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.9.1-6.0.3.el7_9.6.tuxcare.els6
2.9.1-6.0.3.el7_9.6.tuxcare.els6
libxml2
TuxCare:Debian:10
 before 2.9.4+dfsg1-7+deb10u6+tuxcare.els1
2.9.4+dfsg1-7+deb10u6+tuxcare.els1
libxml2-dev
TuxCare:Debian:10
 before 2.9.4+dfsg1-7+deb10u6+tuxcare.els1
2.9.4+dfsg1-7+deb10u6+tuxcare.els1
libxml2-doc
TuxCare:Debian:10
 before 2.9.4+dfsg1-7+deb10u6+tuxcare.els1
2.9.4+dfsg1-7+deb10u6+tuxcare.els1
libxml2-utils
TuxCare:Debian:10
 before 2.9.4+dfsg1-7+deb10u6+tuxcare.els1
2.9.4+dfsg1-7+deb10u6+tuxcare.els1
python-libxml2
TuxCare:Debian:10
 before 2.9.4+dfsg1-7+deb10u6+tuxcare.els1
2.9.4+dfsg1-7+deb10u6+tuxcare.els1
python3-libxml2
TuxCare:Debian:10
 before 2.9.4+dfsg1-7+deb10u6+tuxcare.els1
2.9.4+dfsg1-7+deb10u6+tuxcare.els1
libxml2
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.7.6-21.el6_8.1.tuxcare.els12
2.7.6-21.el6_8.1.tuxcare.els12
libxml2-devel
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.7.6-21.el6_8.1.tuxcare.els12
2.7.6-21.el6_8.1.tuxcare.els12
libxml2-python
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.7.6-21.el6_8.1.tuxcare.els12
2.7.6-21.el6_8.1.tuxcare.els12
libxml2-static
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.7.6-21.el6_8.1.tuxcare.els12
2.7.6-21.el6_8.1.tuxcare.els12
libxml2
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
libxml2-devel
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
libxml2-python
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
libxml2-static
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
libxml2
Debian:12
 before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
libxml2
Debian:13
 before 2.12.7+dfsg+really2.9.14-0.4
2.12.7+dfsg+really2.9.14-0.4
libxml2
Debian:14
 before 2.12.7+dfsg+really2.9.14-0.4
2.12.7+dfsg+really2.9.14-0.4
libxml2
Debian:11
From an advisory covering 7 CVEs
 before 2.9.10+dfsg-6.7+deb11u6, plus listed versions
2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u12.9.10+dfsg-6.7+deb11u22.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u42.9.10+dfsg-6.7+deb11u5
2.9.10+dfsg-6.7+deb11u6
libxml2
Debian:12
From an advisory covering 10 CVEs
 before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
XML2_jll
Julia
 before 2.13.6+1
2.13.6+1
libxml2
Mageia:9
From an advisory covering 3 CVEs
 before 2.10.4-1.6.mga9
2.10.4-1.6.mga9
libxml2
openEuler:22.03-LTS-SP4
From an advisory covering 3 CVEs
 before 2.9.14-15.oe2203sp4
2.9.14-15.oe2203sp4
libxml2
openEuler:24.03-LTS
From an advisory covering 3 CVEs
 before 2.11.9-2.oe2403sp1
2.11.9-2.oe2403sp1
libxml2
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 2.11.9-2.oe2403sp1
2.11.9-2.oe2403sp1
libxml2
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 2.9.10-43.oe2003sp4
2.9.10-43.oe2003sp4
libxml2
openEuler:22.03-LTS-SP3
From an advisory covering 3 CVEs
 before 2.9.14-15.oe2203sp3
2.9.14-15.oe2203sp3
libxml2-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
python3-libxml2-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
python3-libxml2
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2-static
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-debugsource
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-debugsource
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
python3-libxml2
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-devel
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
python3-libxml2-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-debugsource
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
python3-libxml2
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
python3-libxml2-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-devel
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-debuginfo
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-debugsource
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
python3-libxml2
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-devel
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-devel
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-devel
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-devel
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-debuginfo
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-debugsource
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
python3-libxml2
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-devel
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-devel
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-devel
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-debuginfo
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-devel
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-python
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-static
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-debugsource
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
python3-libxml2
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
python3-libxml2
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
python3-libxml2
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2
Root:Alpine:3.15
 before 2.9.14-r20071
2.9.14-r200712.9.14-r20072
rootio-libxml2
Root:Alpine:3.15
 before 2.9.14-r20071
2.9.14-r200712.9.14-r20072
libxml2
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Module for Python 3 15 SP6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.9.4-46.81.1
2.9.4-46.81.1
python-libxml2
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.9.4-46.81.1
2.9.4-46.81.1
libxml2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 3 CVEs
 before 2.9.4-46.81.1
2.9.4-46.81.1
python-libxml2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 3 CVEs
 before 2.9.4-46.81.1
2.9.4-46.81.1
libxml2
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Manager Proxy 4.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Manager Proxy 4.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Manager Server 4.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Manager Server 4.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Micro 6.0
From an advisory covering 3 CVEs
 before 2.11.6-5.1
2.11.6-5.1
libxml2
SUSE:Linux Micro 6.1
From an advisory covering 3 CVEs
 before 2.11.6-slfo.1.1_2.1
2.11.6-slfo.1.1_2.1
libxml2
Ubuntu:Pro:14.04:LTS
 before 2.9.1+dfsg1-3ubuntu4.13+esm7, plus listed versions
2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2
Show 17 moreShow less
2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm6
2.9.1+dfsg1-3ubuntu4.13+esm7
libxml2
Ubuntu:Pro:16.04:LTS
 before 2.9.3+dfsg1-1ubuntu0.7+esm7, plus listed versions
2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1
Show 13 moreShow less
2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm6
2.9.3+dfsg1-1ubuntu0.7+esm7
libxml2
Ubuntu:Pro:18.04:LTS
 before 2.9.4+dfsg1-6.1ubuntu1.9+esm2, plus listed versions
2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1
Show 10 moreShow less
2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm1
2.9.4+dfsg1-6.1ubuntu1.9+esm2
libxml2
Ubuntu:20.04:LTS
 before 2.9.10+dfsg-5ubuntu0.20.04.9, plus listed versions
2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3
Show 11 moreShow less
2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.8
2.9.10+dfsg-5ubuntu0.20.04.9
libxml2
Ubuntu:22.04:LTS
 before 2.9.13+dfsg-1ubuntu0.6, plus listed versions
2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1
Show 5 moreShow less
2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.5
2.9.13+dfsg-1ubuntu0.6
libxml2
Ubuntu:24.04:LTS
 before 2.9.14+dfsg-1.3ubuntu3.2, plus listed versions
2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu12.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.1
2.9.14+dfsg-1.3ubuntu3.2
libxml2
Ubuntu:Pro:14.04:LTS
From an advisory covering 5 CVEs
 before 2.9.1+dfsg1-3ubuntu4.13+esm7, plus listed versions
2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2
Show 17 moreShow less
2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm6
2.9.1+dfsg1-3ubuntu4.13+esm7
libxml2
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+esm7, plus listed versions
2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1
Show 13 moreShow less
2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm6
2.9.3+dfsg1-1ubuntu0.7+esm7
libxml2
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+esm2, plus listed versions
2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1
Show 10 moreShow less
2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm1
2.9.4+dfsg1-6.1ubuntu1.9+esm2
libxml2
Ubuntu:20.04:LTS
From an advisory covering 5 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.9, plus listed versions
2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3
Show 11 moreShow less
2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.8
2.9.10+dfsg-5ubuntu0.20.04.9
libxml2
Ubuntu:22.04:LTS
From an advisory covering 5 CVEs
 before 2.9.13+dfsg-1ubuntu0.6, plus listed versions
2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1
Show 5 moreShow less
2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.5
2.9.13+dfsg-1ubuntu0.6
libxml2
Ubuntu:24.04:LTS
From an advisory covering 5 CVEs
 before 2.9.14+dfsg-1.3ubuntu3.2, plus listed versions
2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu12.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.1
2.9.14+dfsg-1.3ubuntu3.2
libxml2
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 2.13.6-1.1
2.13.6-1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-56171 is a high vulnerability (CVSS 7.8) in Gnome Libxml2, published February 18, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. Fixed in libxml2 2.11.8-r1.

References

Show 95 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open