ALPINE-CVE-2017-16932 PUBLISHED CVSS 7.5 HIGH

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

Risk Scores

CVSS v3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.13clamav0.99.4-r1, 0.97.8-r2, 0.97.8-r1
Alpine:v3.12clamav0.95.1-r1, 0, 0.100.0-r0
Alpine:v3.5clamav0.97.6-r1, 0.99.4-r0, 0.99.2-r2
Alpine:v3.8clamav0.97.7-r0, 0.98.1-r1, 0.98.4-r0
Alpine:v3.9clamav0.99.4-r1, 0, 0.100.0-r0
Alpine:v3.6clamav0, 0.94.2-r0, 0.94.2-r2
Alpine:v3.10clamav0.97-r3, 0.99.4-r1, 0.99.4-r0
Alpine:v3.7clamav0.98.6-r0, 0.99.1-r2, 0.94.2-r0
Alpine:v3.11clamav0, 0.97.2-r0, 0.97.1-r0

Timeline

References

Open in Interactive Console →