Lucene search
Veracode Vulnerability DatabaseVERACODE:6086HistoryApr 11, 2018 - 7:01 a.m.
XML External Entity (XXE)
2018-04-1107:01:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
0.005 Low
EPSS
Percentile
77.1%
libxml2 is vulnerable to XML External Entity (XXE) attacks. The library does not disable document type declaration by default, allowing a malicious user to pass a file that can lead to arbitrary code execution or information disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libxml2.so | le | 2.9.4 | |
| libxml2 | le | 2.7.8.7 |
Related
nessus
nessus
EulerOS Virtualization 2.5.0 : libxml2 (EulerOS-SA-2018-1336)
2018-10-26 00:00:00
SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:1743-1)
2017-07-03 00:00:00
openSUSE Security Update : libxml2 (openSUSE-2017-793)
2017-07-07 00:00:00
debiancve
debiancve
CVE-2017-7375
2018-02-19 19:29:00
cvelist
cvelist
CVE-2017-7375
2018-02-19 19:00:00
cve
cve
CVE-2017-7375
2018-02-19 19:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2018-1336)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1743-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:1813-1)
2021-06-09 00:00:00
nvd
nvd
CVE-2017-7375
2018-02-19 19:29:00
ubuntucve
ubuntucve
CVE-2017-7375
2017-06-21 00:00:00
prion
prion
Design/Logic Flaw
2018-02-19 19:29:00
redhatcve
redhatcve
CVE-2017-7375
2017-06-16 12:52:20
ibm
ibm
veracode
veracode
Remote Code Execution (RCE)
2017-09-21 08:34:03
osv
osv
libxml2 - security update
2017-06-30 00:00:00
libxml2 - security update
2017-08-23 00:00:00
CVE-2017-7375
2018-02-19 19:29:00
debian
debian
[SECURITY] [DLA 1008-1] libxml2 security update
2017-06-30 20:47:21
[SECURITY] [DSA 3952-1] libxml2 security update
2017-08-23 04:54:22
[SECURITY] [DSA 3952-1] libxml2 security update
2017-08-23 04:54:22
ubuntu
ubuntu
libxml2 vulnerabilities
2017-10-10 00:00:00
libxml2 vulnerabilities
2017-09-19 00:00:00
cloudfoundry
cloudfoundry
USN-3424-1: libxml2 vulnerabilities | Cloud Foundry
2017-11-01 00:00:00
rubygems
rubygems
Nokogiri gem, via libxml, is affected by DoS and RCE vulnerabilities
2017-09-18 21:00:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2017-11-10 00:00:00
mageia
mageia
Updated libxml2 & perl-XML-LibXML packages fix security vulnerabilities
2018-01-03 18:50:51
suse
suse
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
androidsecurity
androidsecurity
Android Security Bulletin—June 2017
2017-06-05 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00