7.5

CVE-2017-9049

Exploit

EPSS 0.44%
Published 18.05.2017 06:29:00
Last modified 20.04.2025 01:37:25
Source cve@mitre.org
Teams watchlist Login
Open Login

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.

Affected products Warnungen 0 Metrics 3 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Xmlsoft ≫ Libxml2 Version2.9.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.44%	0.621

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E

https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E

https://security.gentoo.org/glsa/201711-01

http://www.debian.org/security/2017/dsa-3952

http://www.openwall.com/lists/oss-security/2017/05/15/1

Patch

Third Party Advisory

Exploit

Mailing List

http://www.securityfocus.com/bid/98601

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-9049

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-9049

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-9049

EUVD