{"id":"CVE-2008-4226","aliases":["DEBIAN-CVE-2008-4226","DSA-1666-1","EUVD-2008-4209","GHSA-xc47-x3wf-rv79","RHSA-2008:0988","openSUSE-SU-2024:10192-1","openSUSE-SU-2024:10228-1"],"status":"published","title":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent...","description":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04051,"percentile":0.90705,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2008-11-17T00:00:00Z","modified":"2026-10-23T17:47:25Z","fixes":[{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.6.32.dfsg-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.6.32.dfsg-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.6.32.dfsg-5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32.dfsg-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32.dfsg-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32.dfsg-5"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.27.dfsg-6"}]}],"versions":["2.6.27.dfsg-1","2.6.27.dfsg-2","2.6.27.dfsg-3","2.6.27.dfsg-4","2.6.27.dfsg-5"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.19-12.ent"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-14"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.16-12.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.26-2.1.2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-1.22"}]}],"bundled":32},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-1.4"}]}],"bundled":16}],"products":[{"vendor":"xmlsoft","product":"libxml"}],"references":[{"url":"http://secunia.com/advisories/32766","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://support.apple.com/kb/HT3639","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-141243-01-1","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/32326","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://secunia.com/advisories/32773","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6360","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-126356-03-1","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470466","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6219","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00513.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://secunia.com/advisories/32807","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00472.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.osvdb.org/49993","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://secunia.com/advisories/32764","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0001.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/usn-673-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0301","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9888","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://secunia.com/advisories/33746","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc9","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.vupen.com/english/advisories/2009/0034","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/34247","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-067.htm","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/36173","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-251406-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://security.gentoo.org/glsa/glsa-200812-06.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://secunia.com/advisories/32872","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-002.htm","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2008\u0026m=slackware-security.473974","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","web"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0325","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2008/dsa-1666","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","fix"]},{"url":"http://secunia.com/advisories/32802","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/35379","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/32974","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/33792","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/36235","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/32762","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-265329-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0988.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://secunia.com/advisories/33417","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://admin.fedoraproject.org/updates/libxml2-2.7.2-2.fc10","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-261688-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:231","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://support.apple.com/kb/HT3613","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2009/0323","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/32811","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/3176","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://securitytracker.com/id?1021238","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4226","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xc47-x3wf-rv79"},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-4226","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0988","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=470480","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0988.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4225","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4226","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4226","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4483","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2008-4226","description":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.","status":"published","published":"2008-11-25T23:00:00Z","modified":"2024-08-07T10:08:34.94Z","updated_at":"2026-11-02T14:34:47.310062Z"}],"euvd":[{"id":"EUVD-2008-4209","description":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.","status":"published","published":"2008-11-25T23:00:00Z","modified":"2024-08-07T10:08:34Z","updated_at":"2026-11-03T01:38:48.91451Z"}],"ghsa":[{"id":"GHSA-xc47-x3wf-rv79","title":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent...","description":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.","status":"published","published":"2022-05-02T00:08:01Z","modified":"2023-01-31T05:06:52Z","updated_at":"2026-11-02T14:49:06.344022Z"}],"nvd":[{"id":"CVE-2008-4226","description":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.","status":"published","published":"2008-11-25T23:30:00.343Z","modified":"2026-06-16T22:57:25.333Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:01:29.702694Z"}],"osv":[{"id":"CVE-2008-4226","description":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.","status":"published","published":"2008-11-25T23:30:00Z","modified":"2026-04-10T03:40:10.893075Z","updated_at":"2026-11-02T15:43:57.452479Z"},{"id":"DEBIAN-CVE-2008-4226","description":"Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.","status":"published","published":"2008-11-25T23:30:00.343Z","modified":"2026-10-23T17:47:25.499842303Z","updated_at":"2026-11-02T15:45:23.742363Z"},{"id":"DSA-1666-1","title":"libxml2 - several vulnerabilities","status":"published","published":"2008-11-17T00:00:00Z","modified":"2026-03-09T01:18:52.819875Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"openSUSE-SU-2024:10192-1","title":"libxml2-2-2.9.4-1.22 on GA media","description":"These are all security issues fixed in the libxml2-2-2.9.4-1.22 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:48:35.051224Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10228-1","title":"python-libxml2-2.9.4-1.4 on GA media","description":"These are all security issues fixed in the python-libxml2-2.9.4-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:26:38.266131Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2008:0988","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-15T17:37:16Z","modified":"2026-06-26T12:18:37.457841175Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}