CVE-2017-9049

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-9049
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-9049.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-9049
Downstream
Related
Published
2017-05-18T06:29:00.467Z
Modified
2026-07-09T00:04:04.824737Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.

References

Affected packages

Git / github.com/gnome/libxml2

Affected ranges

Type
GIT
Repo
https://github.com/gnome/libxml2
Events
Introduced
bdec2183f34b37ee89ae1d330c6ad2bb4d76605f
Last affected
bdec2183f34b37ee89ae1d330c6ad2bb4d76605f
Database specific 
{
    "extracted_events": [
        {
            "introduced": "2.9.4"
        },
        {
            "last_affected": "2.9.4"
        }
    ],
    "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*",
    "source": "CPE_STRING"
}

Affected versions

2.*
2.9.4
v2.*
v2.9.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-9049.json"

Git / gitlab.gnome.org/gnome/libxml2

Affected ranges

Type
GIT
Repo
https://gitlab.gnome.org/gnome/libxml2
Events
Introduced
bdec2183f34b37ee89ae1d330c6ad2bb4d76605f
Last affected
bdec2183f34b37ee89ae1d330c6ad2bb4d76605f
Database specific 
{
    "extracted_events": [
        {
            "introduced": "2.9.4"
        },
        {
            "last_affected": "2.9.4"
        }
    ],
    "cpe": "cpe:2.3:a:xmlsoft:libxml2:2.9.4:*:*:*:*:*:*:*",
    "source": "CPE_STRING"
}

Affected versions

2.*
2.9.4
v2.*
v2.9.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-9049.json"