{"id":"CVE-2026-8177","aliases":["ALSA-2026:39547","ALSA-2026:39553","ALSA-2026:39878","AZL-86550","CLSA-2026-1784553427","CLSA-2026-1784554254","DEBIAN-CVE-2026-8177","EUVD-2026-29000","GHSA-g5h8-x64v-qf5h","MGASA-2026-0137","OESA-2026-3404","RHSA-2026:39547","RHSA-2026:39553","RHSA-2026:39878","RHSA-2026:68632","RHSA-2026:68685","RHSA-2026:68688","RHSA-2026:68693","RLSA-2026:39547","RLSA-2026:39553","RLSA-2026:39878","SUSE-SU-2026:22081-1","SUSE-SU-2026:2324-1","SUSE-SU-2026:2402-1","UBUNTU-CVE-2026-8177","openSUSE-SU-2026:10854-1","openSUSE-SU-2026:20908-1"],"status":"published","title":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.\n\nA node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.\n\nAny Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00654,"percentile":0.51769,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2026-05-10T20:48:51Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:10","package":"perl-XML-LibXML","fixed_in":["1:2.0210-4.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"perl-XML-LibXML","fixed_in":["1:2.0206-5.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"perl-XML-LibXML","fixed_in":["1:2.0132-3.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"perl-XML-LibXML","fixed_in":["2.0209-3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"perl-XML-LibXML","fixed_in":["1:2.0206-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"perl-XML-LibXML","fixed_in":["1:2.0206-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml-libxml-perl","fixed_in":["2.0207+dfsg+really+2.0134-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml-libxml-perl","fixed_in":["2.0207+dfsg+really+2.0134-5+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml-libxml-perl","fixed_in":["2.0207+dfsg+really+2.0134-8"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"perl-XML-LibXML","fixed_in":["2.20.800-3.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"perl-XML-LibXML","fixed_in":["2.0134-2.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"perl-XML-LibXML","fixed_in":["2.0207-5.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"perl-XML-LibXML","fixed_in":["2.0209-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"perl-XML-LibXML","fixed_in":["2.0209-4.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"perl-XML-LibXML","fixed_in":["2.0209-4.oe2403sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"perl-XML-LibXML","fixed_in":["1:2.0210-4.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"perl-XML-LibXML-debuginfo","fixed_in":["1:2.0210-4.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"perl-XML-LibXML-debugsource","fixed_in":["1:2.0210-4.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-XML-LibXML","fixed_in":["1:2.0206-5.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-XML-LibXML-debuginfo","fixed_in":["1:2.0206-5.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-XML-LibXML-debugsource","fixed_in":["1:2.0206-5.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-XML-LibXML","fixed_in":["1:2.0132-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-XML-LibXML-debuginfo","fixed_in":["1:2.0132-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-XML-LibXML-debugsource","fixed_in":["1:2.0132-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"perl-XML-LibXML","fixed_in":["1:2.0210-4.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"perl-XML-LibXML","fixed_in":["1:2.0206-5.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"perl-XML-LibXML","fixed_in":["1:2.0206-5.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"perl-XML-LibXML","fixed_in":["1:2.0206-5.el9_6.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"perl-XML-LibXML","fixed_in":["1:2.0210-4.el10_2.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"perl-XML-LibXML","fixed_in":["1:2.0206-5.el9_8.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"perl-XML-LibXML","fixed_in":["1:2.0132-3.el8_10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"perl-XML-LibXML","fixed_in":["2.0210-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"perl-XML-LibXML","fixed_in":["2.0210-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"perl-XML-LibXML","fixed_in":["2.0132-150000.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"perl-XML-LibXML","fixed_in":["2.0019-6.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"perl-XML-LibXML","fixed_in":["2.0019-6.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"perl-XML-LibXML","fixed_in":["2.0212-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"perl-XML-LibXML","fixed_in":["2.0210-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0210-4.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0132-3.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0209-3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0207+dfsg+really+2.0134-1+deb12u1"}]}],"versions":["2.0207+dfsg+really+2.0134-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0207+dfsg+really+2.0134-5+deb13u1"}]}],"versions":["2.0207+dfsg+really+2.0134-5"]},{"source":"osv","ecosystem":"Debian:14","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0207+dfsg+really+2.0134-8"}]}],"versions":["2.0207+dfsg+really+2.0134-5","2.0207+dfsg+really+2.0134-6","2.0207+dfsg+really+2.0134-7"]},{"source":"osv","ecosystem":"Mageia:9","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.800-3.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0134-2.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0207-5.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0209-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0209-4.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0209-4.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0210-4.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"perl-XML-LibXML-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0210-4.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"perl-XML-LibXML-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0210-4.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-XML-LibXML-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"perl-XML-LibXML-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0132-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-XML-LibXML-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0132-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"perl-XML-LibXML-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0132-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0210-4.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9_6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0210-4.el10_2.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0206-5.el9_8.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0132-3.el8_10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0210-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0210-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0132-150000.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0019-6.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0019-6.8.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0116+dfsg-5","2.0122+dfsg-1","2.0123+dfsg-1","2.0123+dfsg-1build1","2.0123+dfsg-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0128+dfsg-3","2.0128+dfsg-5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0134+dfsg-1","2.0134+dfsg-1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0134+dfsg-2build1","2.0134+dfsg-2build2","2.0207+dfsg-2","2.0207+dfsg+really+2.0134-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0207+dfsg+really+2.0134-1build1","2.0207+dfsg+really+2.0134-1build2","2.0207+dfsg+really+2.0134-1build3","2.0207+dfsg+really+2.0134-1build4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0207+dfsg+really+2.0134-5build1","2.0207+dfsg+really+2.0207-0ubuntu4","2.0207+dfsg+really+2.0207-0ubuntu5","2.0207+dfsg+really+2.0207-0ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0207+dfsg+really+2.0207-0ubuntu7","2.0207+dfsg+really+2.0207-0ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libxml-libxml-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0207+dfsg+really+2.0207-0ubuntu6","2.0207+dfsg+really+2.0207-0ubuntu7"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0212-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"perl-XML-LibXML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0210-160000.3.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"shlomif","product":"xml::libxml"}],"references":[{"url":"https://github.com/cpan-authors/XML-LibXML/issues/146","tags":["issue-tracking","report","article"]},{"url":"https://github.com/cpan-authors/XML-LibXML/pull/149","tags":["issue-tracking","report"]},{"url":"https://github.com/cpan-authors/XML-LibXML/commit/15652bd905a6c9dda59a81b14d4766adbbae2ea8.patch","tags":["patch","fix","article"]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/10/8","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/11/2","tags":["web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-8177","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2468684","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8177.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68632","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:39547","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:39878","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68688","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68685","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68693","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:39553","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8177","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-g5h8-x64v-qf5h"},{"url":"https://bugzilla.redhat.com/2468684","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-39547.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-39553.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-39878.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784553427.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784554254.html","tags":["advisory"]},{"url":"https://cpan.org/modules","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8177.json","tags":["advisory"]},{"url":"https://github.com/cpan-authors/XML-LibXML","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-8177","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0137.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35507","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/10/8","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3404","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39547.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-8177","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39553.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39878.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68632.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68685.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68688.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68693.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:39547","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:39553","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:39878","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622081-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264715","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8177","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262324-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262402-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-8177","tags":["report"]},{"url":"https://lists.security.metacpan.org/cve-announce/msg/39920366/","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-8177","title":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.\n\nA node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.\n\nAny Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.","status":"published","published":"2026-05-10T20:48:51.816Z","modified":"2026-09-18T12:04:42.416Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-125","CWE-125"],"updated_at":"2026-11-02T13:48:13.398044Z"}],"euvd":[{"id":"EUVD-2026-29000","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.\n\nA node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.\n\nAny Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.","status":"published","published":"2026-05-10T20:48:51Z","modified":"2026-09-18T12:04:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:09.240281Z"}],"ghsa":[{"id":"GHSA-g5h8-x64v-qf5h","title":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node...","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.\n\nA node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.\n\nAny Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.","status":"published","published":"2026-05-10T21:30:23Z","modified":"2026-09-18T15:32:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:12:10.765995Z"}],"nvd":[{"id":"CVE-2026-8177","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.\n\nA node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.\n\nAny Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.","status":"published","published":"2026-05-10T21:16:30.003Z","modified":"2026-09-18T13:18:37.633Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:12:18.239974Z"}],"osv":[{"id":"CVE-2026-8177","title":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.\n\nA node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.\n\nAny Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.","status":"published","published":"2026-05-10T20:48:51.816Z","modified":"2026-10-28T11:01:35.768478472Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:45:18.131258Z"},{"id":"DEBIAN-CVE-2026-8177","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.  A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.  Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.","status":"published","published":"2026-05-10T21:16:30.003Z","modified":"2026-10-01T03:03:51.239483207Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:04.577397Z"},{"id":"OESA-2026-3404","title":"perl-XML-LibXML security update","description":"This module is Perl Binding for libxml2, which implements a Perl interface to the GNOME libxml2 library. This module provides interfaces for parsing and manipulating XML files and allows Perl programmers to use the highly capable validating XML parser and the high performance DOM implementation.\r\n\r\nSecurity Fix(es):\n\nXML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.\n\nA node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.\n\nAny Perl process that passes attacker controlled strings to XML::LibXML\u0026apos;s DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.(CVE-2026-8177)","status":"published","published":"2026-08-20T09:54:29Z","modified":"2026-08-20T10:15:06.354743528Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"RHSA-2026:39547","title":"Red Hat Security Advisory: perl-XML-LibXML security update","status":"published","published":"2026-07-15T10:10:25Z","modified":"2026-09-18T10:10:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:39553","title":"Red Hat Security Advisory: perl-XML-LibXML security update","status":"published","published":"2026-07-15T10:10:25Z","modified":"2026-09-18T10:10:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:39878","title":"Red Hat Security Advisory: perl-XML-LibXML security update","status":"published","published":"2026-07-16T10:10:38Z","modified":"2026-09-18T10:10:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:68632","title":"Red Hat Security Advisory: perl-XML-LibXML security update","status":"published","published":"2026-09-18T10:15:25Z","modified":"2026-09-18T10:32:25.866712727Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:68685","title":"Red Hat Security Advisory: perl-XML-LibXML security update","status":"published","published":"2026-09-18T10:15:31Z","modified":"2026-09-18T10:32:25.921770127Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:68688","title":"Red Hat Security Advisory: perl-XML-LibXML security update","status":"published","published":"2026-09-18T10:15:32Z","modified":"2026-09-18T10:32:19.311167016Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:68693","title":"Red Hat Security Advisory: perl-XML-LibXML security update","status":"published","published":"2026-09-18T10:15:33Z","modified":"2026-09-18T10:32:26.145682199Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:39547","title":"Important: perl-XML-LibXML security update","description":"This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.\n\nSecurity Fix(es):\n\n* perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-15T18:05:36.412344Z","modified":"2026-07-15T18:26:10.596257685Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:39553","title":"Important: perl-XML-LibXML security update","description":"This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.\n\nSecurity Fix(es):\n\n* perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-15T18:03:26.556621Z","modified":"2026-07-15T18:26:10.744229471Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:39878","title":"Important: perl-XML-LibXML security update","description":"This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.\n\nSecurity Fix(es):\n\n* perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-16T00:01:09.519027Z","modified":"2026-07-16T00:30:05.049120346Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-8177","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory. Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.","status":"published","published":"2026-05-10T21:16:00Z","modified":"2026-10-17T13:01:10.507533814Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:57:22.213888Z"},{"id":"ALSA-2026:39547","title":"Important: perl-XML-LibXML security update","description":"This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.  \n\nSecurity Fix(es):  \n\n  * perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-14T00:00:00Z","modified":"2026-10-29T11:30:32.1272893Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:39553","title":"Important: perl-XML-LibXML security update","description":"This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.  \n\nSecurity Fix(es):  \n\n  * perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-14T00:00:00Z","modified":"2026-10-29T11:32:31.577134832Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:39878","title":"Important: perl-XML-LibXML security update","description":"This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.  \n\nSecurity Fix(es):  \n\n  * perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-15T00:00:00Z","modified":"2026-10-29T11:02:24.67907034Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-86550","title":"CVE-2026-8177 affecting package perl-XML-LibXML for versions less than 2.0209-3","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.\n\nA node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.\n\nAny Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.","status":"published","published":"2026-05-10T21:16:30Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.190302Z"},{"id":"CLSA-2026-1784553427","title":"perl-XML-LibXML: Fix of CVE-2026-8177","description":"- CVE-2026-8177: fix out-of-bounds read on truncated multi-byte UTF-8 node names\n  (replace hand-rolled domParseChar with libxml2 xmlValidateName)","status":"published","published":"2026-07-20T13:17:30Z","modified":"2026-10-26T09:30:12.986922369Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1784554254","title":"perl-XML-LibXML: Fix of CVE-2026-8177","description":"- CVE-2026-8177: fix out-of-bounds read on truncated multi-byte UTF-8 node names\n  (replace hand-rolled domParseChar with libxml2 xmlValidateName)","status":"published","published":"2026-07-20T13:31:17Z","modified":"2026-10-26T09:31:18.314740209Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"MGASA-2026-0137","title":"Updated perl-XML-LibXML packages fix security vulnerability","description":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap\nmemory when parsing XML node names containing truncated UTF-8 byte\nsequences. (CVE-2026-8177)\n","status":"published","published":"2026-05-14T02:43:25Z","modified":"2026-05-14T02:45:10.216461Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10854-1","title":"perl-XML-LibXML-2.0212-1.1 on GA media","description":"These are all security issues fixed in the perl-XML-LibXML-2.0212-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-24T00:00:00Z","modified":"2026-05-25T07:45:05.552992199Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:20908-1","title":"Security update for perl-XML-LibXML","description":"This update for perl-XML-LibXML fixes the following issue\n\n- CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences\n  (bsc#1264715).\n","status":"published","published":"2026-06-05T10:40:12Z","modified":"2026-06-09T18:24:31.051119081Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22081-1","title":"Security update for perl-XML-LibXML","description":"This update for perl-XML-LibXML fixes the following issue\n\n- CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences\n  (bsc#1264715).\n","status":"published","published":"2026-06-05T10:41:16Z","modified":"2026-06-16T18:24:37.655062759Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2324-1","title":"Security update for perl-XML-LibXML","description":"This update for perl-XML-LibXML fixes the following issue\n\n- CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences\n  (bsc#1264715).\n","status":"published","published":"2026-06-09T14:33:39Z","modified":"2026-06-10T08:30:05.320421065Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:2402-1","title":"Security update for perl-XML-LibXML","description":"This update for perl-XML-LibXML fixes the following issue\n\n- CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences\n  (bsc#1264715).\n","status":"published","published":"2026-06-15T17:03:59Z","modified":"2026-06-16T10:30:06.904733998Z","updated_at":"2026-11-02T15:54:03.991985Z"}]}}