CVE-2017-7376
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 23%
exploitation probability
23%top 2% of all CVEs
observed exploitation
nono source reports it
Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.
Affected products
n/a · n/aReferences
https://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4https://bugzilla.redhat.com/show_bug.cgi?id=1462216https://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7ehttps://source.android.com/security/bulletin/2017-06-01https://www.debian.org/security/2017/dsa-3952http://www.securityfocus.com/bid/98877http://www.securitytracker.com/id/1038623