Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-56171

Fixed in a distro release EPSS 1%CVSS 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Published 2025-02-18 · CVE record · OSV

Products: xmlsoft libxml2

Distro releases

ReleasePackageFixed in
AlmaLinux 8libxml22.9.7-19.el8_10
AlmaLinux 8libxml2-devel2.9.7-19.el8_10
AlmaLinux 8python3-libxml22.9.7-19.el8_10
AlmaLinux 9libxml22.9.13-6.el9_5.2
AlmaLinux 9libxml2-devel2.9.13-6.el9_5.2
AlmaLinux 9python3-libxml22.9.13-6.el9_5.2
Alpine 3.18libxml22.11.8-r1
Alpine 3.19libxml22.11.8-r1
Alpine 3.20libxml22.12.7-r1
Alpine 3.21libxml22.13.4-r4
Alpine 3.22libxml22.13.6-r0
Alpine 3.23libxml22.13.6-r0
Alpine 3.24libxml22.13.6-r0
Amazon Linux 2libxml22.9.1-6.amzn2.5.16
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.5.16
Amazon Linux 2libxml2-python2.9.1-6.amzn2.5.16
Amazon Linux 2libxml2-static2.9.1-6.amzn2.5.16
Amazon Linux 2023libxml22.10.4-1.amzn2023.0.9
Amazon Linux 2023libxml2-devel2.10.4-1.amzn2023.0.9
Amazon Linux 2023libxml2-static2.10.4-1.amzn2023.0.9
Amazon Linux 2023python3-libxml22.10.4-1.amzn2023.0.9
Chainguardopenjdk-11-openj9-default-policy0.53.0-r0
Chainguardopenjdk-17-openj9-default-policy0.53.0-r0
Chainguardopenjdk-21-openj9-default-policy0.53.0-r0
Chainguardopenjdk-25-openj90.59.0-r1
Chainguardopenjdk-25-openj9-dbg0.59.0-r1
Chainguardopenjdk-25-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-25-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-25-openj9-jmods0.59.0-r1
Chainguardopenjdk-25-openj9-jre0.59.0-r1
Chainguardopenjdk-26-openj90.59.0-r1
Chainguardopenjdk-26-openj9-dbg0.59.0-r1
Chainguardopenjdk-26-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-26-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-26-openj9-jmods0.59.0-r1
Chainguardopenjdk-26-openj9-jre0.59.0-r1
Chainguardopenjdk-7-jreno fix
Chainguardopenjdk-8-openj9-dbg0.53.0-r1
Debian 11libxml22.9.10+dfsg-6.7+deb11u6
Debian 12libxml22.9.14+dfsg-1.3~deb12u2
Debian 13libxml22.12.7+dfsg+really2.9.14-0.4
Debian 14libxml22.12.7+dfsg+really2.9.14-0.4
Red Hat Enterprise Linux 10.0libxml20:2.12.5-5.el10_0
Red Hat Enterprise Linux 10.0libxml2-debuginfo0:2.12.5-5.el10_0
Red Hat Enterprise Linux 10.0libxml2-debugsource0:2.12.5-5.el10_0
Red Hat Enterprise Linux 10.0libxml2-devel0:2.12.5-5.el10_0
Red Hat Enterprise Linux 10.0libxml2-static0:2.12.5-5.el10_0
Red Hat Enterprise Linux 10.0python3-libxml20:2.12.5-5.el10_0
Red Hat Enterprise Linux 10.0python3-libxml2-debuginfo0:2.12.5-5.el10_0
Red Hat Enterprise Linux 8libxml20:2.9.7-19.el8_10
Red Hat Enterprise Linux 8libxml2-debuginfo0:2.9.7-19.el8_10
Red Hat Enterprise Linux 8libxml2-debugsource0:2.9.7-19.el8_10
Red Hat Enterprise Linux 8libxml2-devel0:2.9.7-19.el8_10
Red Hat Enterprise Linux 8python3-libxml20:2.9.7-19.el8_10
Red Hat Enterprise Linux 8python3-libxml2-debuginfo0:2.9.7-19.el8_10
Red Hat Enterprise Linux 9libxml20:2.9.13-6.el9_5.2
Red Hat Enterprise Linux 9libxml2-debuginfo0:2.9.13-6.el9_5.2
Red Hat Enterprise Linux 9libxml2-debugsource0:2.9.13-6.el9_5.2
Red Hat Enterprise Linux 9libxml2-devel0:2.9.13-6.el9_5.2
Red Hat Enterprise Linux 9python3-libxml20:2.9.13-6.el9_5.2
Red Hat Enterprise Linux 9python3-libxml2-debuginfo0:2.9.13-6.el9_5.2
Red Hat rhel aus 8.2libxml20:2.9.7-9.el8_2.1
Red Hat rhel aus 8.2libxml2-debuginfo0:2.9.7-9.el8_2.1
Red Hat rhel aus 8.2libxml2-debugsource0:2.9.7-9.el8_2.1
Red Hat rhel aus 8.2libxml2-devel0:2.9.7-9.el8_2.1
Red Hat rhel aus 8.2python3-libxml20:2.9.7-9.el8_2.1
Red Hat rhel aus 8.2python3-libxml2-debuginfo0:2.9.7-9.el8_2.1
Red Hat rhel aus 8.4libxml20:2.9.7-9.el8_4.5
Red Hat rhel aus 8.4libxml2-debuginfo0:2.9.7-9.el8_4.5
Red Hat rhel aus 8.4libxml2-debugsource0:2.9.7-9.el8_4.5
Red Hat rhel aus 8.4libxml2-devel0:2.9.7-9.el8_4.5
Red Hat rhel aus 8.4python3-libxml20:2.9.7-9.el8_4.5
Red Hat rhel aus 8.4python3-libxml2-debuginfo0:2.9.7-9.el8_4.5
Red Hat rhel aus 8.6libxml20:2.9.7-13.el8_6.8
Red Hat rhel aus 8.6libxml2-debuginfo0:2.9.7-13.el8_6.8
Red Hat rhel aus 8.6libxml2-debugsource0:2.9.7-13.el8_6.8
Red Hat rhel aus 8.6libxml2-devel0:2.9.7-13.el8_6.8
Red Hat rhel aus 8.6python3-libxml20:2.9.7-13.el8_6.8
Red Hat rhel aus 8.6python3-libxml2-debuginfo0:2.9.7-13.el8_6.8
Red Hat rhel e4s 8.4libxml20:2.9.7-9.el8_4.5
Red Hat rhel e4s 8.4libxml2-debuginfo0:2.9.7-9.el8_4.5
Red Hat rhel e4s 8.4libxml2-debugsource0:2.9.7-9.el8_4.5
Red Hat rhel e4s 8.4libxml2-devel0:2.9.7-9.el8_4.5
Red Hat rhel e4s 8.4python3-libxml20:2.9.7-9.el8_4.5
Red Hat rhel e4s 8.4python3-libxml2-debuginfo0:2.9.7-9.el8_4.5
Red Hat rhel e4s 8.6libxml20:2.9.7-13.el8_6.8
Red Hat rhel e4s 8.6libxml2-debuginfo0:2.9.7-13.el8_6.8
Red Hat rhel e4s 8.6libxml2-debugsource0:2.9.7-13.el8_6.8
Red Hat rhel e4s 8.6libxml2-devel0:2.9.7-13.el8_6.8
Red Hat rhel e4s 8.6python3-libxml20:2.9.7-13.el8_6.8
Red Hat rhel e4s 8.6python3-libxml2-debuginfo0:2.9.7-13.el8_6.8
Red Hat rhel e4s 9.0libxml20:2.9.13-1.el9_0.4
Red Hat rhel e4s 9.0libxml2-debuginfo0:2.9.13-1.el9_0.4
Red Hat rhel e4s 9.0libxml2-debugsource0:2.9.13-1.el9_0.4
Red Hat rhel e4s 9.0libxml2-devel0:2.9.13-1.el9_0.4
Red Hat rhel e4s 9.0python3-libxml20:2.9.13-1.el9_0.4
Red Hat rhel e4s 9.0python3-libxml2-debuginfo0:2.9.13-1.el9_0.4
Red Hat rhel els 7libxml20:2.9.1-6.el7_9.9
Red Hat rhel els 7libxml2-debuginfo0:2.9.1-6.el7_9.9
Red Hat rhel els 7libxml2-devel0:2.9.1-6.el7_9.9
Red Hat rhel els 7libxml2-python0:2.9.1-6.el7_9.9
Red Hat rhel els 7libxml2-static0:2.9.1-6.el7_9.9
Red Hat rhel eus 8.8libxml20:2.9.7-16.el8_8.7
Red Hat rhel eus 8.8libxml2-debuginfo0:2.9.7-16.el8_8.7
Red Hat rhel eus 8.8libxml2-debugsource0:2.9.7-16.el8_8.7
Red Hat rhel eus 8.8libxml2-devel0:2.9.7-16.el8_8.7
Red Hat rhel eus 8.8python3-libxml20:2.9.7-16.el8_8.7
Red Hat rhel eus 8.8python3-libxml2-debuginfo0:2.9.7-16.el8_8.7
Red Hat rhel eus 9.2libxml20:2.9.13-3.el9_2.6
Red Hat rhel eus 9.2libxml2-debuginfo0:2.9.13-3.el9_2.6
Red Hat rhel eus 9.2libxml2-debugsource0:2.9.13-3.el9_2.6
Red Hat rhel eus 9.2libxml2-devel0:2.9.13-3.el9_2.6
Red Hat rhel eus 9.2python3-libxml20:2.9.13-3.el9_2.6
Red Hat rhel eus 9.2python3-libxml2-debuginfo0:2.9.13-3.el9_2.6
Red Hat rhel eus 9.4libxml20:2.9.13-9.el9_4
Red Hat rhel eus 9.4libxml2-debuginfo0:2.9.13-9.el9_4
Red Hat rhel eus 9.4libxml2-debugsource0:2.9.13-9.el9_4
Red Hat rhel eus 9.4libxml2-devel0:2.9.13-9.el9_4
Red Hat rhel eus 9.4python3-libxml20:2.9.13-9.el9_4
Red Hat rhel eus 9.4python3-libxml2-debuginfo0:2.9.13-9.el9_4
Red Hat rhel tus 8.4libxml20:2.9.7-9.el8_4.5
Red Hat rhel tus 8.4libxml2-debuginfo0:2.9.7-9.el8_4.5
Red Hat rhel tus 8.4libxml2-debugsource0:2.9.7-9.el8_4.5
Red Hat rhel tus 8.4libxml2-devel0:2.9.7-9.el8_4.5
Red Hat rhel tus 8.4python3-libxml20:2.9.7-9.el8_4.5
Red Hat rhel tus 8.4python3-libxml2-debuginfo0:2.9.7-9.el8_4.5
Red Hat rhel tus 8.6libxml20:2.9.7-13.el8_6.8
Red Hat rhel tus 8.6libxml2-debuginfo0:2.9.7-13.el8_6.8
Red Hat rhel tus 8.6libxml2-debugsource0:2.9.7-13.el8_6.8
Red Hat rhel tus 8.6libxml2-devel0:2.9.7-13.el8_6.8
Red Hat rhel tus 8.6python3-libxml20:2.9.7-13.el8_6.8
Red Hat rhel tus 8.6python3-libxml2-debuginfo0:2.9.7-13.el8_6.8
Rocky Linux 8libxml20:2.9.7-19.el8_10
Rocky Linux 9libxml20:2.9.13-6.el9_5.2
SUSE Enterprise Storage 7.1libxml22.9.7-150000.3.76.1
SUSE Enterprise Storage 7.1python-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSlibxml22.9.7-150000.3.76.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml22.9.14-150400.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml22.9.14-150400.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibxml22.10.3-150500.5.23.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibxml22.10.3-150500.5.23.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Micro 5.1libxml22.9.7-150000.3.76.1
SUSE Linux Enterprise Micro 5.2libxml22.9.7-150000.3.76.1
SUSE Linux Enterprise Micro 5.2python-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise Micro 5.3libxml22.9.14-150400.5.38.1
SUSE Linux Enterprise Micro 5.3libxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise Micro 5.4libxml22.9.14-150400.5.38.1
SUSE Linux Enterprise Micro 5.4libxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise Micro 5.5libxml22.10.3-150500.5.23.1
SUSE Linux Enterprise Micro 5.5libxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libxml22.10.3-150500.5.23.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Module for Python 3 15 SP6libxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Server 12 SP5-LTSSlibxml22.9.4-46.81.1
SUSE Linux Enterprise Server 12 SP5-LTSSpython-libxml22.9.4-46.81.1
SUSE Linux Enterprise Server 15 SP3-LTSSlibxml22.9.7-150000.3.76.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibxml22.9.14-150400.5.38.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibxml22.10.3-150500.5.23.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5libxml22.9.4-46.81.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5python-libxml22.9.4-46.81.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3libxml22.9.7-150000.3.76.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libxml22.9.14-150400.5.38.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libxml22.10.3-150500.5.23.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libxml2-python2.10.3-150500.5.23.1
SUSE Linux Micro 6.0libxml22.11.6-5.1
SUSE Linux Micro 6.1libxml22.11.6-slfo.1.1_2.1
SUSE Manager Proxy 4.3libxml22.9.14-150400.5.38.1
SUSE Manager Proxy 4.3libxml2-python2.9.14-150400.5.38.1
SUSE Manager Server 4.3libxml22.9.14-150400.5.38.1
SUSE Manager Server 4.3libxml2-python2.9.14-150400.5.38.1
Ubuntu 20.04 LTSlibxml22.9.10+dfsg-5ubuntu0.20.04.9
Ubuntu 22.04 LTSlibxml22.9.13+dfsg-1ubuntu0.6
Ubuntu 24.04 LTSlibxml22.9.14+dfsg-1.3ubuntu3.2
Ubuntu Pro 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.13+esm7
Ubuntu Pro 16.04 LTSlibxml22.9.3+dfsg1-1ubuntu0.7+esm7
Ubuntu Pro 18.04 LTSlibxml22.9.4+dfsg1-6.1ubuntu1.9+esm2
Wolfiopenjdk-7-jreno fix
openSUSE Leap 15.6libxml22.10.3-150500.5.23.1
openSUSE Leap 15.6libxml2-python2.10.3-150500.5.23.1
openSUSE Leap 15.6python-libxml2-python2.9.7-150000.3.76.1
openSUSE Tumbleweedlibxml22.13.6-1.1