Description
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.
Published: 2017-05-18
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-1008-1 libxml2 security update
Debian DSA Debian DSA DSA-3952-1 libxml2 security update
EUVD EUVD EUVD-2017-17989 libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.
Ubuntu USN Ubuntu USN USN-3424-1 libxml2 vulnerabilities
Ubuntu USN Ubuntu USN USN-3424-2 libxml2 vulnerabilities
History

Thu, 18 Dec 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 11 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00365}

epss

{'score': 0.00335}


Subscriptions

Redhat Jboss Core Services
Xmlsoft Libxml2
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-12-18T14:20:32.345Z

Reserved: 2017-05-18T00:00:00.000Z

Link: CVE-2017-9049

cve-icon Vulnrichment

Updated: 2024-08-05T16:55:22.042Z

cve-icon NVD

Status : Deferred

Published: 2017-05-18T06:29:00.467

Modified: 2025-12-18T15:15:47.030

Link: CVE-2017-9049

cve-icon Redhat

Severity : Moderate

Publid Date: 2017-05-15T00:00:00Z

Links: CVE-2017-9049 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses