CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.
A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.
Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.
A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.
Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
- Record
CVE-2026-8177- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125, CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2026-29000
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.
A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.
Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
- Record
EUVD-2026-29000- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g5h8-x64v-qf5h
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node...
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.
A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.
Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
- Record
GHSA-g5h8-x64v-qf5h- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.
A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.
Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
- Record
CVE-2026-8177- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.
A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.
Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
- Record
CVE-2026-8177- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory. Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
- Record
DEBIAN-CVE-2026-8177- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 24 moreShow less
OSVOESA-2026-3404
perl-XML-LibXML security update
This module is Perl Binding for libxml2, which implements a Perl interface to the GNOME libxml2 library. This module provides interfaces for parsing and manipulating XML files and allows Perl programmers to use the highly capable validating XML parser and the high performance DOM implementation.
Security Fix(es):
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.
A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.
Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.(CVE-2026-8177)
- Record
OESA-2026-3404- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:39547
Red Hat Security Advisory: perl-XML-LibXML security update
- Record
RHSA-2026:39547- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:39553
Red Hat Security Advisory: perl-XML-LibXML security update
- Record
RHSA-2026:39553- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:39878
Red Hat Security Advisory: perl-XML-LibXML security update
- Record
RHSA-2026:39878- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:68632
Red Hat Security Advisory: perl-XML-LibXML security update
- Record
RHSA-2026:68632- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:68685
Red Hat Security Advisory: perl-XML-LibXML security update
- Record
RHSA-2026:68685- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:68688
Red Hat Security Advisory: perl-XML-LibXML security update
- Record
RHSA-2026:68688- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:68693
Red Hat Security Advisory: perl-XML-LibXML security update
- Record
RHSA-2026:68693- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:39547
Important: perl-XML-LibXML security update
This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.
Security Fix(es):
- perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:39547- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:39553
Important: perl-XML-LibXML security update
This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.
Security Fix(es):
- perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:39553- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:39878
Important: perl-XML-LibXML security update
This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.
Security Fix(es):
- perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:39878- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory. Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
- Record
UBUNTU-CVE-2026-8177- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2026:39547 No score
Important: perl-XML-LibXML security update
This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.
Security Fix(es):
- perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:39547- Updated
- 2026-11-02
OSVALSA-2026:39553 No score
Important: perl-XML-LibXML security update
This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.
Security Fix(es):
- perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:39553- Updated
- 2026-11-02
OSVALSA-2026:39878 No score
Important: perl-XML-LibXML security update
This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.
Security Fix(es):
- perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:39878- Updated
- 2026-11-02
OSVAZL-86550 No score
CVE-2026-8177 affecting package perl-XML-LibXML for versions less than 2.0209-3
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.
A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.
Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.
- Record
AZL-86550- Updated
- 2026-11-05
OSVCLSA-2026-1784553427 No score
perl-XML-LibXML: Fix of CVE-2026-8177
- CVE-2026-8177: fix out-of-bounds read on truncated multi-byte UTF-8 node names (replace hand-rolled domParseChar with libxml2 xmlValidateName)
- Record
CLSA-2026-1784553427- Updated
- 2026-11-02
OSVCLSA-2026-1784554254 No score
perl-XML-LibXML: Fix of CVE-2026-8177
- CVE-2026-8177: fix out-of-bounds read on truncated multi-byte UTF-8 node names (replace hand-rolled domParseChar with libxml2 xmlValidateName)
- Record
CLSA-2026-1784554254- Updated
- 2026-11-02
OSVMGASA-2026-0137 No score
Updated perl-XML-LibXML packages fix security vulnerability
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. (CVE-2026-8177)
- Record
MGASA-2026-0137- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10854-1 No score
perl-XML-LibXML-2.0212-1.1 on GA media
These are all security issues fixed in the perl-XML-LibXML-2.0212-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10854-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20908-1 No score
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue
- CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
- Record
openSUSE-SU-2026:20908-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22081-1 No score
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue
- CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
- Record
SUSE-SU-2026:22081-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2324-1 No score
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue
- CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
- Record
SUSE-SU-2026:2324-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2402-1 No score
Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issue
- CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).
- Record
SUSE-SU-2026:2402-1- Updated
- 2026-11-02
Affected products
- shlomif xml::libxml
- red hat enterprise linux 10
- red hat enterprise linux 10.0 extended update support
- red hat enterprise linux 6
- red hat enterprise linux 7
- red hat enterprise linux 8
- red hat enterprise linux 9
- red hat enterprise linux 9.2 update services for sap solutions
- red hat enterprise linux 9.4 update services for sap solutions
- red hat enterprise linux 9.6 extended update support
- red hat openshift container platform 4
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perl-XML-LibXMLAlmaLinux:10 |
before 1:2.0210-4.el10_2.1 | 1:2.0210-4.el10_2.1 |
perl-XML-LibXMLAlmaLinux:9 |
before 1:2.0206-5.el9_8.1 | 1:2.0206-5.el9_8.1 |
perl-XML-LibXMLAlmaLinux:8 |
before 1:2.0132-3.el8_10 | 1:2.0132-3.el8_10 |
perl-XML-LibXMLAzure Linux:3 |
before 2.0209-3 | 2.0209-3 |
perl-XML-LibXMLTuxCare:AlmaLinux:9.2 |
before 1:2.0206-5.el9.tuxcare.els1 | 1:2.0206-5.el9.tuxcare.els1 |
perl-XML-LibXMLTuxCare:AlmaLinux:9.6 |
before 1:2.0206-5.el9.tuxcare.els1 | 1:2.0206-5.el9.tuxcare.els1 |
libxml-libxml-perlDebian:12 |
before 2.0207+dfsg+really+2.0134-1+deb12u1, plus listed versions 2.0207+dfsg+really+2.0134-1 |
2.0207+dfsg+really+2.0134-1+deb12u1 |
libxml-libxml-perlDebian:13 |
before 2.0207+dfsg+really+2.0134-5+deb13u1, plus listed versions 2.0207+dfsg+really+2.0134-5 |
2.0207+dfsg+really+2.0134-5+deb13u1 |
libxml-libxml-perlDebian:14 |
before 2.0207+dfsg+really+2.0134-8, plus listed versions 2.0207+dfsg+really+2.0134-52.0207+dfsg+really+2.0134-62.0207+dfsg+really+2.0134-7 |
2.0207+dfsg+really+2.0134-8 |
perl-XML-LibXMLMageia:9 |
before 2.20.800-3.1.mga9 | 2.20.800-3.1.mga9 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
perl-XML-LibXMLopenEuler:20.03-LTS-SP4 |
before 2.0134-2.oe2003sp4 | 2.0134-2.oe2003sp4 |
perl-XML-LibXMLopenEuler:22.03-LTS-SP4 |
before 2.0207-5.oe2203sp4 | 2.0207-5.oe2203sp4 |
perl-XML-LibXMLopenEuler:24.03-LTS-SP1 |
before 2.0209-4.oe2403sp1 | 2.0209-4.oe2403sp1 |
perl-XML-LibXMLopenEuler:24.03-LTS-SP3 |
before 2.0209-4.oe2403sp3 | 2.0209-4.oe2403sp3 |
perl-XML-LibXMLopenEuler:24.03-LTS-SP4 |
before 2.0209-4.oe2403sp4 | 2.0209-4.oe2403sp4 |
perl-XML-LibXMLRed Hat:enterprise_linux:10.2 |
before 1:2.0210-4.el10_2.1 | 1:2.0210-4.el10_2.1 |
perl-XML-LibXML-debuginfoRed Hat:enterprise_linux:10.2 |
before 1:2.0210-4.el10_2.1 | 1:2.0210-4.el10_2.1 |
perl-XML-LibXML-debugsourceRed Hat:enterprise_linux:10.2 |
before 1:2.0210-4.el10_2.1 | 1:2.0210-4.el10_2.1 |
perl-XML-LibXMLRed Hat:enterprise_linux:9::appstream |
before 1:2.0206-5.el9_8.1 | 1:2.0206-5.el9_8.1 |
perl-XML-LibXML-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:2.0206-5.el9_8.1 | 1:2.0206-5.el9_8.1 |
perl-XML-LibXML-debugsourceRed Hat:enterprise_linux:9::appstream |
before 1:2.0206-5.el9_8.1 | 1:2.0206-5.el9_8.1 |
perl-XML-LibXMLRed Hat:enterprise_linux:8::appstream |
before 1:2.0132-3.el8_10 | 1:2.0132-3.el8_10 |
perl-XML-LibXML-debuginfoRed Hat:enterprise_linux:8::appstream |
before 1:2.0132-3.el8_10 | 1:2.0132-3.el8_10 |
perl-XML-LibXML-debugsourceRed Hat:enterprise_linux:8::appstream |
before 1:2.0132-3.el8_10 | 1:2.0132-3.el8_10 |
perl-XML-LibXMLRed Hat:enterprise_linux_eus:10.0 |
before 1:2.0210-4.el10_0.1 | 1:2.0210-4.el10_0.1 |
perl-XML-LibXMLRed Hat:rhel_e4s:9.4::appstream |
before 1:2.0206-5.el9_4.1 | 1:2.0206-5.el9_4.1 |
perl-XML-LibXMLRed Hat:rhel_e4s:9.2::appstream |
before 1:2.0206-5.el9_2.1 | 1:2.0206-5.el9_2.1 |
perl-XML-LibXMLRed Hat:rhel_eus:9.6::appstream |
before 1:2.0206-5.el9_6.1 | 1:2.0206-5.el9_6.1 |
perl-XML-LibXMLRocky Linux:10 |
before 1:2.0210-4.el10_2.1 | 1:2.0210-4.el10_2.1 |
perl-XML-LibXMLRocky Linux:9 |
before 1:2.0206-5.el9_8.1 | 1:2.0206-5.el9_8.1 |
perl-XML-LibXMLRocky Linux:8 |
before 1:2.0132-3.el8_10 | 1:2.0132-3.el8_10 |
perl-XML-LibXMLSUSE:Linux Enterprise Server 16.0 |
before 2.0210-160000.3.1 | 2.0210-160000.3.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 2.0210-160000.3.1 | 2.0210-160000.3.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Server 15 SP5-LTSS |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Server 15 SP6-LTSS |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Server for SAP Applications 15 SP5 |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Server for SAP Applications 15 SP6 |
before 2.0132-150000.3.8.1 | 2.0132-150000.3.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Server 12 SP5-LTSS |
before 2.0019-6.8.1 | 2.0019-6.8.1 |
perl-XML-LibXMLSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 2.0019-6.8.1 | 2.0019-6.8.1 |
libxml-libxml-perlUbuntu:16.04:LTS |
All versions, plus listed versions 2.0116+dfsg-52.0122+dfsg-12.0123+dfsg-12.0123+dfsg-1build12.0123+dfsg-1ubuntu0.1 |
None known |
libxml-libxml-perlUbuntu:18.04:LTS |
All versions, plus listed versions 2.0128+dfsg-32.0128+dfsg-5 |
None known |
libxml-libxml-perlUbuntu:20.04:LTS |
All versions, plus listed versions 2.0134+dfsg-12.0134+dfsg-1build1 |
None known |
libxml-libxml-perlUbuntu:22.04:LTS |
All versions, plus listed versions 2.0134+dfsg-2build12.0134+dfsg-2build22.0207+dfsg-22.0207+dfsg+really+2.0134-1 |
None known |
libxml-libxml-perlUbuntu:24.04:LTS |
All versions, plus listed versions 2.0207+dfsg+really+2.0134-1build12.0207+dfsg+really+2.0134-1build22.0207+dfsg+really+2.0134-1build32.0207+dfsg+really+2.0134-1build4 |
None known |
libxml-libxml-perlUbuntu:25.10 |
All versions, plus listed versions 2.0207+dfsg+really+2.0134-5build12.0207+dfsg+really+2.0207-0ubuntu42.0207+dfsg+really+2.0207-0ubuntu52.0207+dfsg+really+2.0207-0ubuntu6 |
None known |
libxml-libxml-perlUbuntu:26.10 |
All versions, plus listed versions 2.0207+dfsg+really+2.0207-0ubuntu72.0207+dfsg+really+2.0207-0ubuntu8 |
None known |
libxml-libxml-perlUbuntu:26.04:LTS |
All versions, plus listed versions 2.0207+dfsg+really+2.0207-0ubuntu62.0207+dfsg+really+2.0207-0ubuntu7 |
None known |
perl-XML-LibXMLopenSUSE:Tumbleweed |
before 2.0212-1.1 | 2.0212-1.1 |
perl-XML-LibXMLopenSUSE:Leap 16.0 |
before 2.0210-160000.3.1 | 2.0210-160000.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-8177 is a high vulnerability (CVSS 7.5) in Shlomif Xml::libxml, published May 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. Fixed in perl-XML-LibXML 1:2.0210-4.el10_2.1.
References
github.com/cpan-authors/XML-LibXML/issues/146
openwall.com/lists/oss-security/2026/05/10/8
access.redhat.com/security/cve/CVE-2026-8177
Show 43 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2468684
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8177.json
nvd.nist.gov/vuln/detail/CVE-2026-8177
errata.almalinux.org/10/ALSA-2026-39547.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784553427.html
cpan.org/modules
security-tracker.debian.org/tracker/CVE-2026-8177
advisories.mageia.org/MGASA-2026-0137.html
bugs.mageia.org/show_bug.cgi?id=35507
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-3404
cve.org/CVERecord?id=CVE-2026-8177
errata.rockylinux.org/RLSA-2026:39547
suse.com/support/update/announcement/2026/suse-su-202622081-1
bugzilla.suse.com/1264715
ubuntu.com/security/CVE-2026-8177
lists.security.metacpan.org/cve-announce/msg/39920366