XMLSoft Libxml2 2.9.8

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:xmlsoft:libxml2:2.9.8:*:*:*:*:*:*:*

part: a version: 2.9.8 update: *

VendorXmlsoft (be3c3366-cde4-54a5-8785-eb1f04df6881)
ProductLibxml2 (b6949b35-db17-5df6-ad91-0baa70a48eb5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libxml2 purl2cpe 2026-06-01 10:12:19.603075
pkg:deb/ubuntu/libxml2 purl2cpe 2026-06-01 10:12:19.603077
pkg:github/gnome/libxml2 purl2cpe 2026-06-01 10:12:19.603078
pkg:gitlab/redhat/libxml2 purl2cpe 2026-06-01 10:12:19.603079
pkg:rpm/fedora/libxml2 purl2cpe 2026-06-01 10:12:19.603081
pkg:rpm/opensuse/libxml2 purl2cpe 2026-06-01 10:12:19.603082

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-9251 vulnerable 2026-06-08 05:12:07.975875 Details available
The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.
Published: 2018-04-04T02:00:00.000Z
Updated: 2024-08-05T07:17:51.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14567 vulnerable 2026-06-08 05:10:53.053413 Details available
libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.
Published: 2018-08-16T20:00:00.000Z
Updated: 2024-08-05T09:29:51.664Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.