CVE-2017-8872
Fixed in a distro release EPSS 2%CVSS 9.1
The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
Products: xmlsoft libxml2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxml2 | 2.9.4+dfsg1-6.1 |
| Debian 13 | libxml2 | 2.9.4+dfsg1-6.1 |
| Debian 14 | libxml2 | 2.9.4+dfsg1-6.1 |
| Debian 9 | libxml2 | 2.9.4+dfsg1-2.2+deb9u3 |
| SUSE Linux Enterprise Desktop 12 SP2 | libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Desktop 12 SP2 | python-libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Desktop 12 SP3 | libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Desktop 12 SP3 | python-libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server 11 SP4 | libxml2 | 2.7.6-0.77.3.2 |
| SUSE Linux Enterprise Server 11 SP4 | libxml2-python | 2.7.6-0.77.3.5 |
| SUSE Linux Enterprise Server 12 SP2 | libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server 12 SP2 | python-libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server 12 SP3 | libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server 12 SP3 | python-libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | python-libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxml2 | 2.7.6-0.77.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libxml2-python | 2.7.6-0.77.3.5 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python-libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python-libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libxml2 | 2.7.6-0.77.3.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libxml2 | 2.9.4-46.3.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libxml2 | 2.9.4-46.3.2 |
| Ubuntu 18.04 LTS | libxml2 | 2.9.4+dfsg1-6.1ubuntu1 |
| Ubuntu 18.04 LTS | libxml2 | 2.9.4+dfsg1-6.1ubuntu1.4 |
| Ubuntu 20.04 LTS | libxml2 | 2.9.10+dfsg-5ubuntu0.20.04.1 |
| Ubuntu Pro 14.04 LTS | libxml2 | 2.9.1+dfsg1-3ubuntu4.13+esm2 |
| Ubuntu Pro 16.04 LTS | libxml2 | 2.9.3+dfsg1-1ubuntu0.7+esm1 |