CVE-2017-16931

CVE-2017-16931

Published · Updated

Follow this CVE+ Monitor libxml2+ Monitor libxml2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.6%
parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.
Affected products
n/a · n/a