Description
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Published: 2020-01-21
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-2369-1 libxml2 security update
EUVD EUVD EUVD-2020-0292 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Github GHSA Github GHSA GHSA-7553-jr98-vx47 libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
Ubuntu USN Ubuntu USN USN-4274-1 libxml2 vulnerabilities
History

Wed, 03 Dec 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Canonical Ubuntu Linux
Debian Debian Linux
Fedoraproject Fedora
Netapp Clustered Data Ontap H300e H300e Firmware H300s H300s Firmware H410c H410c Firmware H410s H410s Firmware H500e H500e Firmware H500s H500s Firmware H700e H700e Firmware H700s H700s Firmware Smi-s Provider Snapdrive Steelstore Cloud Integrated Storage Symantec Netbackup
Oracle Communications Cloud Native Core Network Function Cloud Native Environment Enterprise Manager Base Platform Enterprise Manager Ops Center Mysql Workbench Peoplesoft Enterprise Peopletools Real User Experience Insight
Redhat Enterprise Linux Jboss Core Services Openshift Do
Siemens Sinema Remote Connect Server
Xmlsoft Libxml2
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-12-03T15:50:13.875Z

Reserved: 2020-01-21T00:00:00.000Z

Link: CVE-2020-7595

cve-icon Vulnrichment

Updated: 2024-08-04T09:33:19.963Z

cve-icon NVD

Status : Modified

Published: 2020-01-21T23:15:13.867

Modified: 2025-12-03T16:15:54.123

Link: CVE-2020-7595

cve-icon Redhat

Severity : Moderate

Publid Date: 2020-01-21T00:00:00Z

Links: CVE-2020-7595 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses