CVE-2017-8872
libxml2: The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buf...
CVE-2017-8872 is fixed in 4 products on 1 platform, first by libxml2 2.9.4+dfsg1-6.1ubuntu1, released February 7, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0231
83rd percentile
The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libxml2 · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1 | libxml2 2.9.4+dfsg1-6.1ubuntu1 | Feb 7, 2018 |
| libxml2-utils · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1 | libxml2-utils 2.9.4+dfsg1-6.1ubuntu1 | Feb 7, 2018 |
| python-libxml2 · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1 | python-libxml2 2.9.4+dfsg1-6.1ubuntu1 | Feb 7, 2018 |
| python3-libxml2 · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1 | python3-libxml2 2.9.4+dfsg1-6.1ubuntu1 | Feb 7, 2018 |