{"id":"CVE-2023-39615","aliases":["ALSA-2023:7747","ALSA-2024:0119","DEBIAN-CVE-2023-39615","DLA-4064-1","DSA-5949-1","EUVD-2023-43324","GHSA-9fj4-8443-vg2m","JLSEC-2025-81","MGASA-2023-0279","RHSA-2023:7544","RHSA-2023:7747","RHSA-2024:0119","RHSA-2024:0413","RLSA-2024:0119","SUSE-SU-2023:3665-1","SUSE-SU-2023:3666-1","SUSE-SU-2023:3666-2","SUSE-SU-2023:3698-1","SUSE-SU-2023:3699-1","openSUSE-SU-2024:13192-1"],"status":"disputed","title":"Xmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the...","description":"Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01079,"percentile":0.65302,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2023-08-29T00:00:00Z","modified":"2026-10-29T11:31:35Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libxml2","fixed_in":["2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libxml2-devel","fixed_in":["2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-libxml2","fixed_in":["2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libxml2","fixed_in":["2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libxml2-devel","fixed_in":["2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-libxml2","fixed_in":["2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"XML2_jll","fixed_in":["2.12.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libxml2","fixed_in":["2.9.10-7.8.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libxml2","fixed_in":["2.10.4-1.1.mga9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-16.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-16.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2","fixed_in":["0:2.9.7-16.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-16.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-16.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","fixed_in":["0:2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-5.el9_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","fixed_in":["0:2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libxml2","fixed_in":["0:2.9.7-18.el8_9","0:2.9.7-18.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2","fixed_in":["2.10.3-150500.5.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libxml2","fixed_in":["2.10.3-150500.5.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","fixed_in":["2.10.3-150500.5.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxml2","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.60.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","fixed_in":["2.9.14-150400.5.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","fixed_in":["2.9.14-150400.5.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2","fixed_in":["2.9.14-150400.5.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.22.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libxml2","fixed_in":["2.9.14-150400.5.22.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.22.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libxml2","fixed_in":["2.10.4-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.7+deb11u6"}]}],"versions":["2.9.10+dfsg-6.7","2.9.10+dfsg-6.7+deb11u1","2.9.10+dfsg-6.7+deb11u2","2.9.10+dfsg-6.7+deb11u3","2.9.10+dfsg-6.7+deb11u4","2.9.10+dfsg-6.7+deb11u5"],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"],"bundled":10},{"source":"osv","ecosystem":"Julia","package":"XML2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"2.11.5+0"},{"fixed":"2.12.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-7.8.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-1.1.mga9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-5.el9_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.60.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-3.1"}]}]}],"products":[{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"sinec nms"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/535","tags":["x_transferred","Exploit","Issue Tracking","Patch","report","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-784301.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39615","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9fj4-8443-vg2m"},{"url":"https://access.redhat.com/errata/RHSA-2023:7747","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39615","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235864","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-7747.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0119","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0119.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39615.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-39615","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0279.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39615","tags":["advisory"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-September/016186.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7544","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235864","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7544.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7747.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0119.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0413","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185994","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0413.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40303","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40303","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40304","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28484","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:0119","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233665-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201978","tags":["report"]},{"url":"https://bugzilla.suse.com/1210411","tags":["report"]},{"url":"https://bugzilla.suse.com/1210412","tags":["report"]},{"url":"https://bugzilla.suse.com/1214768","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39615","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233666-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233666-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233698-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233699-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-39615","description":"Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.","status":"disputed","published":"2023-08-29T00:00:00Z","modified":"2026-10-14T23:43:09.661Z","updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-43324","description":"Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.","status":"published","published":"2023-08-29T00:00:00Z","modified":"2026-10-14T23:43:09Z","updated_at":"2026-11-02T17:27:11.209168Z"}],"ghsa":[{"id":"GHSA-9fj4-8443-vg2m","title":"Xmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the...","description":"Xmlsoft Libxml2 v2.11.0 was discovered to contain a global buffer overflow via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file.","status":"published","published":"2023-08-29T18:31:53Z","modified":"2026-10-15T00:30:41Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:13:29.914076Z"}],"nvd":[{"id":"CVE-2023-39615","description":"Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.","status":"disputed","published":"2023-08-29T17:15:12.527Z","modified":"2026-10-15T00:16:36.337Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:08:25.025396Z"}],"osv":[{"id":"DEBIAN-CVE-2023-39615","description":"Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.","status":"published","published":"2023-08-29T17:15:12.527Z","modified":"2026-10-26T18:02:31.516891671Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"JLSEC-2025-81","title":"Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the...","description":"Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at `/libxml2/SAX2.c`. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.","status":"published","published":"2025-10-17T17:40:51.659Z","modified":"2026-07-25T18:23:45.288135594Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"RHSA-2023:7544","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-16T12:45:46Z","modified":"2026-09-21T10:06:07Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7747","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-16T12:46:06Z","modified":"2026-09-21T10:06:12Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0119","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-16T12:46:17Z","modified":"2026-09-21T10:06:16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0413","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-16T12:46:09Z","modified":"2026-10-15T10:06:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2024:0119","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:34.309952Z","modified":"2025-05-07T19:38:06.101812Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"ALSA-2023:7747","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-12-12T00:00:00Z","modified":"2026-10-29T11:31:35.101024403Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2024:0119","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-10T00:00:00Z","modified":"2026-10-29T11:02:20.194811536Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CVE-2023-39615","description":"Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.","status":"published","published":"2023-08-29T00:00:00Z","modified":"2026-10-28T02:30:22.042501059Z","updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DLA-4064-1","title":"libxml2 - security update","status":"published","published":"2025-02-22T00:00:00Z","modified":"2026-03-09T01:20:30.558703Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5949-1","title":"libxml2 - security update","status":"published","published":"2025-06-26T00:00:00Z","modified":"2026-03-09T02:09:32.257423Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2023-0279","title":"Updated libxml2 packages fix a security vulnerability","description":"The updated packages fix a security vulnerability:\n\nLibxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability\nallows attackers to cause a Denial of Service (DoS) via supplying a\ncrafted XML file. (CVE-2023-39615).\n","status":"published","published":"2023-09-30T19:15:40Z","modified":"2026-05-30T05:15:05.982358076Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13192-1","title":"libxml2-2-2.10.4-3.1 on GA media","description":"These are all security issues fixed in the libxml2-2-2.10.4-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:01:25.740743Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:3665-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-29469: Fixed not deterministic hashing of empty dict strings (bsc#1210412).\n- CVE-2023-28484: Fixed NULL dereference in xmlSchemaFixupComplexType (bsc#1210411).\n- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).\n- CVE-2016-3709: Fixed cross-site scripting vulnerability in libxml (bsc#1201978).\n","status":"published","published":"2023-09-18T19:51:39Z","modified":"2025-05-02T04:29:41.699472Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3666-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).\n","status":"published","published":"2023-09-18T19:52:25Z","modified":"2026-02-04T04:02:52.443621Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3666-2","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).\n","status":"published","published":"2023-10-16T19:13:24Z","modified":"2025-05-02T04:35:17.335547Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3698-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).\n","status":"published","published":"2023-09-20T09:01:39Z","modified":"2026-02-04T03:40:05.850784Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3699-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).\n","status":"published","published":"2023-09-20T09:02:59Z","modified":"2026-02-04T02:26:36.624739Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}