CVE-2017-5969 — Vulnetix

Try Vulnetix Request Demo

CVE-2017-5969 PUBLISHED

libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.

EPSS 2.93% · 86.3th percentile

Risk Scores

EPSS Score

2.93%

86.3th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:Pro:16.04:LTS	libxml2	0, 2.9.2+zdfsg1-4, 2.9.2+zdfsg1-4ubuntu1
Ubuntu:Pro:14.04:LTS	libxml2	2.9.1+dfsg1-3ubuntu4.13+esm9, 0, 2.9.1+dfsg1-3ubuntu4.13+esm11

Timeline

CVE Published
Oct 4, 2019 PoC Published
Apr 14, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Mar 17, 2025 EPSS Score
Mar 21, 2025 EPSS Score
Mar 26, 2025 EPSS Score
Mar 27, 2025 EPSS Score
Mar 31, 2025 EPSS Score
Apr 6, 2025 EPSS Score
Apr 7, 2025 EPSS Score
Apr 11, 2025 EPSS Score

References

https://ubuntu.com/security/CVE-2017-5969 third-party-advisory
http://www.openwall.com/lists/oss-security/2016/11/05/3 third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2017-5969 third-party-advisory

Open in Interactive Console →