{"id":"CVE-2017-16931","aliases":["ALPINE-CVE-2017-16931","DEBIAN-CVE-2017-16931","DLA-1194-1","EUVD-2017-8101","GHSA-7mr2-r9fx-7j9m","UBUNTU-CVE-2017-16931"],"status":"published","title":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro...","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0458,"percentile":0.91693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2017-11-23T21:00:00Z","modified":"2026-10-24T14:19:46Z","fixes":[{"ecosystem":"Alpine:v3.4","package":"libxml2","fixed_in":["2.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libxml2","fixed_in":["2.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libxml2","fixed_in":["2.9.5-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.9.4+dfsg1-3.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.9.4+dfsg1-3.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.9.4+dfsg1-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.5-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-3.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-3.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-3.1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0+dfsg1-7+wheezy11"}]}],"versions":["2.8.0+dfsg1-7+nmu1","2.8.0+dfsg1-7+nmu2","2.8.0+dfsg1-7+nmu3","2.8.0+dfsg1-7+wheezy1","2.8.0+dfsg1-7+wheezy10","2.8.0+dfsg1-7+wheezy2","2.8.0+dfsg1-7+wheezy3","2.8.0+dfsg1-7+wheezy4","2.8.0+dfsg1-7+wheezy5","2.8.0+dfsg1-7+wheezy6","2.8.0+dfsg1-7+wheezy7","2.8.0+dfsg1-7+wheezy8","2.8.0+dfsg1-7+wheezy9"],"bundled":2}],"products":[{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00041.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=766956","tags":["x_refsource_CONFIRM","x_transferred","Permissions Required","report"]},{"url":"http://xmlsoft.org/news.html","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://github.com/GNOME/libxml2/commit/e26630548e7d138d2c560844c43820b6767251e3","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16931"},{"url":"https://github.com/advisories/GHSA-7mr2-r9fx-7j9m"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-16931","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-16931","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-16931","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16931","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.","status":"published","published":"2017-11-23T21:00:00Z","modified":"2026-10-14T06:30:26.259Z","updated_at":"2026-11-02T14:33:21.453505Z"}],"euvd":[{"id":"EUVD-2017-8101","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.","status":"published","published":"2017-11-23T21:00:00Z","modified":"2026-10-14T06:30:26Z","updated_at":"2026-11-02T17:27:17.902641Z"}],"ghsa":[{"id":"GHSA-7mr2-r9fx-7j9m","title":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro...","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.","status":"published","published":"2022-05-13T01:08:24Z","modified":"2026-10-14T09:31:16Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:13:22.867821Z"}],"nvd":[{"id":"CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.","status":"published","published":"2017-11-23T21:29:00.39Z","modified":"2026-10-14T07:16:39.46Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:09.7374Z"}],"osv":[{"id":"ALPINE-CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.","status":"published","published":"2017-11-23T21:29:00.39Z","modified":"2026-06-15T18:24:57.60237927Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.","status":"published","published":"2017-11-23T21:29:00.39Z","modified":"2026-10-24T14:19:46.802153326Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"DEBIAN-CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.","status":"published","published":"2017-11-23T21:29:00.39Z","modified":"2026-10-15T07:47:24.582856681Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"UBUNTU-CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.","status":"withdrawn","published":"2017-11-23T21:29:00Z","modified":"2025-07-16T08:13:05.43426Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"DLA-1194-1","title":"libxml2 - security update","status":"published","published":"2017-11-30T00:00:00Z","modified":"2026-03-09T01:00:50.51616Z","updated_at":"2026-11-02T15:46:09.336894Z"}]}}