GCVE-VVD-MAGEIA-2017-305

Advisory Published

Vulnetix · Advisory published August 24, 2017

It was discovered xmlsec1's use of libxml2 inadvertently enabled external entity expansion (XXE) along with validation. An attacker could craft an XML file that would cause xmlsec1 to try and read local files or HTTP/FTP URLs, leading to information disclosure or denial of service (CVE-2017-1000061).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	xmlsec1	0 (affected), 1.2.24-1.mga5 (unaffected)	—
Mageia	xmlsec1	0 (affected), 1.2.24-1.mga6 (unaffected)	—

References

Updated xmlsec1 packages fix security vulnerability

advisory

Updated xmlsec1 packages fix security vulnerability

advisory

Updated xmlsec1 packages fix security vulnerability

issue

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON