CVE-2017-5969

libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document

published April 11, 2017

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02630 · 85.3th percentile
Published
2017-04-11T16:00Z
EPSS history
Timeline
  • 11 APR 16:00Z
    libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document
    cvelistv5