CVE-2017-7375

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-7375
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7375.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-7375
Downstream
Related
Published
2018-02-19T19:29:00.703Z
Modified
2026-07-07T08:49:36.710210471Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes). Depending on the context, this may expose a higher-risk attack surface in libxml2 not usually reachable with default parser flags, and expose content from local files, HTTP, or FTP servers (which might be otherwise unreachable).

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "debian:debian_linux",
            "extracted_events": [
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                },
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                },
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                }
            ]
        },
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
                "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
                "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
                "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*"
            ],
            "vendor_product": "google:android",
            "extracted_events": [
                {
                    "introduced": "4.4.4"
                },
                {
                    "last_affected": "4.4.4"
                },
                {
                    "introduced": "5.0.2"
                },
                {
                    "last_affected": "5.0.2"
                },
                {
                    "introduced": "5.1.1"
                },
                {
                    "last_affected": "5.1.1"
                },
                {
                    "introduced": "6.0"
                },
                {
                    "last_affected": "6.0"
                },
                {
                    "introduced": "6.0.1"
                },
                {
                    "last_affected": "6.0.1"
                },
                {
                    "introduced": "7.0"
                },
                {
                    "last_affected": "7.0"
                },
                {
                    "introduced": "7.1.1"
                },
                {
                    "last_affected": "7.1.1"
                },
                {
                    "introduced": "7.1.2"
                },
                {
                    "last_affected": "7.1.2"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/gnome/libxml2

Affected ranges

Type
GIT
Repo
https://github.com/gnome/libxml2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bdec2183f34b37ee89ae1d330c6ad2bb4d76605f
Introduced
a1dca81df7c352cd9a14ab678750b1623f8f8ed7
Last affected
8effcb578e0590cc01bbcab0f9dccefc6bdbcdbd
Database specific 
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:xmlsoft:libxml2:2.9.4:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:xmlsoft:libxml2:2.9.4:rc2:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.9.4"
        },
        {
            "introduced": "2.9.4-rc1"
        },
        {
            "last_affected": "2.9.4-rc1"
        },
        {
            "introduced": "2.9.4-rc2"
        },
        {
            "last_affected": "2.9.4-rc2"
        }
    ]
}

Affected versions

2.*
2.9.4-rc1
2.9.4-rc2
Other
CVE-2016-1833
CVE-2016-1834
CVE-2016-1835
CVE-2016-1836
CVE-2016-1837
CVE-2016-1838
CVE-2016-1839
CVE-2016-1840
CVE-2016-3627
CVE-2016-3705
CVE-2016-4449
CVE-2016-4483
v2.*
v2.9.4
v2.9.4-rc1
v2.9.4-rc2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7375.json"

Git / gitlab.gnome.org/gnome/libxml2

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/gnome/libxml2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bdec2183f34b37ee89ae1d330c6ad2bb4d76605f
Introduced
a1dca81df7c352cd9a14ab678750b1623f8f8ed7
Last affected
8effcb578e0590cc01bbcab0f9dccefc6bdbcdbd
Database specific 
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:xmlsoft:libxml2:2.9.4:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:xmlsoft:libxml2:2.9.4:rc2:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.9.4"
        },
        {
            "introduced": "2.9.4-rc1"
        },
        {
            "last_affected": "2.9.4-rc1"
        },
        {
            "introduced": "2.9.4-rc2"
        },
        {
            "last_affected": "2.9.4-rc2"
        }
    ]
}

Affected versions

2.*
2.9.4-rc1
2.9.4-rc2
Other
CVE-2016-1833
CVE-2016-1834
CVE-2016-1835
CVE-2016-1836
CVE-2016-1837
CVE-2016-1838
CVE-2016-1839
CVE-2016-1840
CVE-2016-3627
CVE-2016-3705
CVE-2016-4449
CVE-2016-4483
v2.*
v2.9.4
v2.9.4-rc1
v2.9.4-rc2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7375.json"