Severity
7.5HIGH
EPSS
2.7%
top 14.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 18
Latest updateFeb 18

Description

A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actu

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

CVEListV5xmlsoft/libxml22.13.02.13.6+1
Debianlibxml2< 2.9.4+dfsg1-3.1+3
NVDxmlsoft/libxml22.9.4

Patches

🔴Vulnerability Details

3
GHSA
GHSA-m5m9-w72w-8c23: A buffer overflow was discovered in libxml2 20904-GITv22022-05-13
OSV
CVE-2017-9047: A buffer overflow was discovered in libxml2 20904-GITv22017-05-18
CVEList
CVE-2017-9047: A buffer overflow was discovered in libxml2 20904-GITv22017-05-18

📋Vendor Advisories

6
Red Hat
libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml22025-02-18
Microsoft
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted D2025-02-11
Ubuntu
libxml2 vulnerabilities2017-10-10
Ubuntu
libxml2 vulnerabilities2017-09-19
Red Hat
libxml2: Buffer overflow in function xmlSnprintfElementContent2017-05-15

💬Community

3
Bugzilla
CVE-2017-9047 CVE-2017-9048 CVE-2017-9049 CVE-2017-9050 mingw-libxml2: various flaws [fedora-all]2017-05-19
Bugzilla
CVE-2017-9047 CVE-2017-9048 CVE-2017-9049 CVE-2017-9050 libxml2: various flaws [fedora-all]2017-05-19
Bugzilla
CVE-2017-9047 libxml2: Buffer overflow in function xmlSnprintfElementContent2017-05-19
CVE-2017-9047 (HIGH CVSS 7.5) | A buffer overflow was discovered in | cvebase.io