VDB
GCVE-VVD-MAGEIA-2017-305
GCVE-VVD-MAGEIA-2017-305
Advisory Published
It was discovered xmlsec1's use of libxml2 inadvertently enabled
external entity expansion (XXE) along with validation. An attacker could
craft an XML file that would cause xmlsec1 to try and read local files
or HTTP/FTP URLs, leading to information disclosure or denial of service
(CVE-2017-1000061).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | xmlsec1 | 0 (affected), 1.2.24-1.mga5 (unaffected) | — |
| Mageia | xmlsec1 | 0 (affected), 1.2.24-1.mga6 (unaffected) | — |
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.