CVE-2011-2834
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote...
6.8 MediumFix available
CVE-2011-2834 is a medium vulnerability (CVSS 6.8) in Google Chrome, published September 17, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. Fixed in libxml2 2.7.8.dfsg-5.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 2.04%EPSS, 81st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.7.8.dfsg-5libxml2 +62 more
Description
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
Exploit likelihood
2.04%Down 1.4 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libxml2Debian:12 | before 2.7.8.dfsg-5 | 2.7.8.dfsg-5 |
libxml2Debian:13 | before 2.7.8.dfsg-5 | 2.7.8.dfsg-5 |
libxml2Debian:14 | before 2.7.8.dfsg-5 | 2.7.8.dfsg-5 |
libxml2Debian:6.0 From an advisory covering 5 CVEs | before 2.7.8.dfsg-2+squeeze2, plus listed versions 2.7.8.dfsg-22.7.8.dfsg-2+squeeze1 | 2.7.8.dfsg-2+squeeze2 |
libxml2Debian:5.0 From an advisory covering 5 CVEs | before 2.6.32.dfsg-5+lenny5, plus listed versions 2.6.32.dfsg-52.6.32.dfsg-5+lenny12.6.32.dfsg-5+lenny22.6.32.dfsg-5+lenny32.6.32.dfsg-5+lenny4 | 2.6.32.dfsg-5+lenny5 |
libxml2Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-develRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-staticRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-pythonRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
Show 53 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libxml2Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-develRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-staticRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-pythonRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-staticRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-develRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-pythonRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-staticRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-develRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2-pythonRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs | before 0:2.7.6-4.el6 | 0:2.7.6-4.el6 |
libxml2Red Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-pythonRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2Red Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-pythonRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2Red Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-pythonRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2Red Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2-pythonRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:2.6.16-12.9 | 0:2.6.16-12.9 |
libxml2Red Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
libxml2-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
libxml2-pythonRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
libxml2Red Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
libxml2-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
libxml2-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
libxml2Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
libxml2-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
libxml2-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
libxml2-pythonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:2.6.26-2.1.12.el5_7.2 | 0:2.6.26-2.1.12.el5_7.2 |
mingw32-libxml2Red Hat:enterprise_linux:6::client From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-staticRed Hat:enterprise_linux:6::client From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2Red Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-staticRed Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2Red Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-staticRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2Red Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
mingw32-libxml2-staticRed Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs | before 0:2.7.6-6.el6_3 | 0:2.7.6-6.el6_3 |
What each source reports
NVD Score used
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
- Record
CVE-2011-2834- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-415
- Updated
- 2026-11-02
CVE ListNo score
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
- Record
CVE-2011-2834- Updated
- 2026-11-02
EUVDEUVD-2011-2808No score
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
- Record
EUVD-2011-2808- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r39r-m3xh-jh67No score
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote...
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
- Record
GHSA-r39r-m3xh-jh67- Weakness
- CWE-415
- Updated
- 2026-11-02
OSVNo score
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
- Record
CVE-2011-2834- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-2834No score
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
- Record
DEBIAN-CVE-2011-2834- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
mandriva.com/security/advisories?name=MDVSA-2011:145
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
osvdb.org/75560
support.apple.com/kb/HT5503
rhn.redhat.com/errata/RHSA-2013-0217.html
Show 64 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14410
redhat.com/support/errata/RHSA-2011-1749.html
googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html
code.google.com/p/chromium/issues/detail?id=93472
exchange.xforce.ibmcloud.com/vulnerabilities/69885
debian.org/security/2012/dsa-2394
nvd.nist.gov/vuln/detail/CVE-2011-2834
github.com/advisories/GHSA-r39r-m3xh-jh67
security-tracker.debian.org/tracker/CVE-2011-2834
access.redhat.com/errata/RHSA-2011:1749
bugzilla.redhat.com/show_bug.cgi?id=645341
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1749.json
cve.org/CVERecord?id=CVE-2010-4008