CVE-2013-0338 [Medium] | Memory Corruption in Libxml2

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-07-02	2.97%	2.86%	-0.12%
2	2026-06-15	0.67%	2.97%	+2.30%
3	2026-04-08	—	0.67%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-07-02

2.97%

2.86%

-0.12%

2026-06-15

0.67%

2.97%

+2.30%

2026-04-08

—

0.67%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
4.3	2.0	MEDIUM	`AV:N/AC:M/Au:N/C:N/I:N/A:P` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:M) Exploitation needs some favorable conditions, but not exceptional ones. Authentication (AU:N) No authentication is required. Confidentiality impact (C:N) No confidentiality impact. Integrity impact (I:N) No integrity impact. Availability impact (A:P) Partial availability impact.	8.6	2.9	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

4.3

2.0

MEDIUM

AV:N/AC:M/Au:N/C:N/I:N/A:P Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:M): Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:N): No confidentiality impact.
Integrity impact (I:N): No integrity impact.
Availability impact (A:P): Partial availability impact.

8.6

2.9

[email protected]

OS Trackers for CVE-2013-0338

vendor	priority	summary	link
`debian`	not yet assigned	CVE-2013-0338 not yet assigned priority: Debian including 1 source packages (libxml2), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.	https://security-tracker.debian.org/tracker/CVE-2013-0338
`gentoo`	normal	CVE-2013-0338: 2 GLSA(s) (201311-06, 201412-11), 2 atom(s) (app-emulation/emul-linux-x86-baselibs, dev-libs/libxml2); latest impact normal.	https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2013-0338
`redhat`	medium	—	https://access.redhat.com/security/cve/CVE-2013-0338
`suse`	medium	CVE-2013-0338 severity moderate: SUSE including 72 source package names (libxml2-2-2.11.6-2.1, libxml2-2-2.11.6-slfo.1.1_1.2, …), 117 product×package rows across 36 product lines (SUSE Linux Enterprise Desktop 11 SP2, SUSE Linux Enterprise Desktop 12, … (36 product lines)): Fixed 117.	https://www.suse.com/security/cve/CVE-2013-0338/
`ubuntu`	medium	CVE-2013-0338 medium priority: Ubuntu including 1 source packages (libxml2), 6 status rows across 6 suites (hardy, lucid, oneiric, precise, quantal, upstream): released 6.	https://ubuntu.com/security/CVE-2013-0338

NVD evaluator notes for CVE-2013-0338

Impact: Per http://www.ubuntu.com/usn/USN-1782-1/ "A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.10 Ubuntu 12.04 LTS Ubuntu 11.10 Ubuntu 10.04 LTS Ubuntu 8.04 LTS" Per http://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html "http://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html"

Affected software / configurations for CVE-2013-0338

Vendor	Product	Version	Raw CPE
xmlsoft	libxml2	<= 2.9.0	cpe:2.3:a:xmlsoft:libxml2::::::::
xmlsoft	libxml2	1.7.0	cpe:2.3:a:xmlsoft:libxml2:1.7.0:::::::*
xmlsoft	libxml2	1.7.1	cpe:2.3:a:xmlsoft:libxml2:1.7.1:::::::*
xmlsoft	libxml2	1.7.2	cpe:2.3:a:xmlsoft:libxml2:1.7.2:::::::*
xmlsoft	libxml2	1.7.3	cpe:2.3:a:xmlsoft:libxml2:1.7.3:::::::*
xmlsoft	libxml2	1.7.4	cpe:2.3:a:xmlsoft:libxml2:1.7.4:::::::*
xmlsoft	libxml2	1.8.0	cpe:2.3:a:xmlsoft:libxml2:1.8.0:::::::*
xmlsoft	libxml2	1.8.1	cpe:2.3:a:xmlsoft:libxml2:1.8.1:::::::*
xmlsoft	libxml2	1.8.2	cpe:2.3:a:xmlsoft:libxml2:1.8.2:::::::*
xmlsoft	libxml2	1.8.3	cpe:2.3:a:xmlsoft:libxml2:1.8.3:::::::*
xmlsoft	libxml2	1.8.4	cpe:2.3:a:xmlsoft:libxml2:1.8.4:::::::*
xmlsoft	libxml2	1.8.5	cpe:2.3:a:xmlsoft:libxml2:1.8.5:::::::*
xmlsoft	libxml2	1.8.6	cpe:2.3:a:xmlsoft:libxml2:1.8.6:::::::*
xmlsoft	libxml2	1.8.7	cpe:2.3:a:xmlsoft:libxml2:1.8.7:::::::*
xmlsoft	libxml2	1.8.9	cpe:2.3:a:xmlsoft:libxml2:1.8.9:::::::*
xmlsoft	libxml2	1.8.10	cpe:2.3:a:xmlsoft:libxml2:1.8.10:::::::*
xmlsoft	libxml2	1.8.13	cpe:2.3:a:xmlsoft:libxml2:1.8.13:::::::*
xmlsoft	libxml2	1.8.14	cpe:2.3:a:xmlsoft:libxml2:1.8.14:::::::*
xmlsoft	libxml2	1.8.16	cpe:2.3:a:xmlsoft:libxml2:1.8.16:::::::*
xmlsoft	libxml2	2.0.0	cpe:2.3:a:xmlsoft:libxml2:2.0.0:::::::*
xmlsoft	libxml2	2.1.0	cpe:2.3:a:xmlsoft:libxml2:2.1.0:::::::*
xmlsoft	libxml2	2.1.1	cpe:2.3:a:xmlsoft:libxml2:2.1.1:::::::*
xmlsoft	libxml2	2.2.0	cpe:2.3:a:xmlsoft:libxml2:2.2.0:::::::*
xmlsoft	libxml2	2.2.0	cpe:2.3:a:xmlsoft:libxml2:2.2.0:beta::::::
xmlsoft	libxml2	2.2.1	cpe:2.3:a:xmlsoft:libxml2:2.2.1:::::::*
xmlsoft	libxml2	2.2.2	cpe:2.3:a:xmlsoft:libxml2:2.2.2:::::::*
xmlsoft	libxml2	2.2.3	cpe:2.3:a:xmlsoft:libxml2:2.2.3:::::::*
xmlsoft	libxml2	2.2.4	cpe:2.3:a:xmlsoft:libxml2:2.2.4:::::::*
xmlsoft	libxml2	2.2.5	cpe:2.3:a:xmlsoft:libxml2:2.2.5:::::::*
xmlsoft	libxml2	2.2.6	cpe:2.3:a:xmlsoft:libxml2:2.2.6:::::::*
xmlsoft	libxml2	2.2.7	cpe:2.3:a:xmlsoft:libxml2:2.2.7:::::::*
xmlsoft	libxml2	2.2.8	cpe:2.3:a:xmlsoft:libxml2:2.2.8:::::::*
xmlsoft	libxml2	2.2.9	cpe:2.3:a:xmlsoft:libxml2:2.2.9:::::::*
xmlsoft	libxml2	2.2.10	cpe:2.3:a:xmlsoft:libxml2:2.2.10:::::::*
xmlsoft	libxml2	2.2.11	cpe:2.3:a:xmlsoft:libxml2:2.2.11:::::::*
xmlsoft	libxml2	2.3.0	cpe:2.3:a:xmlsoft:libxml2:2.3.0:::::::*
xmlsoft	libxml2	2.3.1	cpe:2.3:a:xmlsoft:libxml2:2.3.1:::::::*
xmlsoft	libxml2	2.3.2	cpe:2.3:a:xmlsoft:libxml2:2.3.2:::::::*
xmlsoft	libxml2	2.3.3	cpe:2.3:a:xmlsoft:libxml2:2.3.3:::::::*
xmlsoft	libxml2	2.3.4	cpe:2.3:a:xmlsoft:libxml2:2.3.4:::::::*
xmlsoft	libxml2	2.3.5	cpe:2.3:a:xmlsoft:libxml2:2.3.5:::::::*
xmlsoft	libxml2	2.3.6	cpe:2.3:a:xmlsoft:libxml2:2.3.6:::::::*
xmlsoft	libxml2	2.3.7	cpe:2.3:a:xmlsoft:libxml2:2.3.7:::::::*
xmlsoft	libxml2	2.3.8	cpe:2.3:a:xmlsoft:libxml2:2.3.8:::::::*
xmlsoft	libxml2	2.3.9	cpe:2.3:a:xmlsoft:libxml2:2.3.9:::::::*
xmlsoft	libxml2	2.3.10	cpe:2.3:a:xmlsoft:libxml2:2.3.10:::::::*
xmlsoft	libxml2	2.3.11	cpe:2.3:a:xmlsoft:libxml2:2.3.11:::::::*
xmlsoft	libxml2	2.3.12	cpe:2.3:a:xmlsoft:libxml2:2.3.12:::::::*
xmlsoft	libxml2	2.3.13	cpe:2.3:a:xmlsoft:libxml2:2.3.13:::::::*
xmlsoft	libxml2	2.3.14	cpe:2.3:a:xmlsoft:libxml2:2.3.14:::::::*
xmlsoft	libxml2	2.4.1	cpe:2.3:a:xmlsoft:libxml2:2.4.1:::::::*
xmlsoft	libxml2	2.4.2	cpe:2.3:a:xmlsoft:libxml2:2.4.2:::::::*
xmlsoft	libxml2	2.4.3	cpe:2.3:a:xmlsoft:libxml2:2.4.3:::::::*
xmlsoft	libxml2	2.4.4	cpe:2.3:a:xmlsoft:libxml2:2.4.4:::::::*
xmlsoft	libxml2	2.4.5	cpe:2.3:a:xmlsoft:libxml2:2.4.5:::::::*
xmlsoft	libxml2	2.4.6	cpe:2.3:a:xmlsoft:libxml2:2.4.6:::::::*
xmlsoft	libxml2	2.4.7	cpe:2.3:a:xmlsoft:libxml2:2.4.7:::::::*
xmlsoft	libxml2	2.4.8	cpe:2.3:a:xmlsoft:libxml2:2.4.8:::::::*
xmlsoft	libxml2	2.4.9	cpe:2.3:a:xmlsoft:libxml2:2.4.9:::::::*
xmlsoft	libxml2	2.4.10	cpe:2.3:a:xmlsoft:libxml2:2.4.10:::::::*
xmlsoft	libxml2	2.4.11	cpe:2.3:a:xmlsoft:libxml2:2.4.11:::::::*
xmlsoft	libxml2	2.4.12	cpe:2.3:a:xmlsoft:libxml2:2.4.12:::::::*
xmlsoft	libxml2	2.4.13	cpe:2.3:a:xmlsoft:libxml2:2.4.13:::::::*
xmlsoft	libxml2	2.4.14	cpe:2.3:a:xmlsoft:libxml2:2.4.14:::::::*
xmlsoft	libxml2	2.4.15	cpe:2.3:a:xmlsoft:libxml2:2.4.15:::::::*
xmlsoft	libxml2	2.4.16	cpe:2.3:a:xmlsoft:libxml2:2.4.16:::::::*
xmlsoft	libxml2	2.4.17	cpe:2.3:a:xmlsoft:libxml2:2.4.17:::::::*
xmlsoft	libxml2	2.4.18	cpe:2.3:a:xmlsoft:libxml2:2.4.18:::::::*
xmlsoft	libxml2	2.4.19	cpe:2.3:a:xmlsoft:libxml2:2.4.19:::::::*
xmlsoft	libxml2	2.4.20	cpe:2.3:a:xmlsoft:libxml2:2.4.20:::::::*
xmlsoft	libxml2	2.4.21	cpe:2.3:a:xmlsoft:libxml2:2.4.21:::::::*
xmlsoft	libxml2	2.4.22	cpe:2.3:a:xmlsoft:libxml2:2.4.22:::::::*
xmlsoft	libxml2	2.4.23	cpe:2.3:a:xmlsoft:libxml2:2.4.23:::::::*
xmlsoft	libxml2	2.4.24	cpe:2.3:a:xmlsoft:libxml2:2.4.24:::::::*
xmlsoft	libxml2	2.4.25	cpe:2.3:a:xmlsoft:libxml2:2.4.25:::::::*
xmlsoft	libxml2	2.4.26	cpe:2.3:a:xmlsoft:libxml2:2.4.26:::::::*
xmlsoft	libxml2	2.4.27	cpe:2.3:a:xmlsoft:libxml2:2.4.27:::::::*
xmlsoft	libxml2	2.4.28	cpe:2.3:a:xmlsoft:libxml2:2.4.28:::::::*
xmlsoft	libxml2	2.4.29	cpe:2.3:a:xmlsoft:libxml2:2.4.29:::::::*
xmlsoft	libxml2	2.4.30	cpe:2.3:a:xmlsoft:libxml2:2.4.30:::::::*

References for CVE-2013-0338

URL	Tags
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html
http://lists.opensuse.org/opensuse-updates/2013-03/msg00112.html
http://lists.opensuse.org/opensuse-updates/2013-03/msg00114.html
http://marc.info/?l=bugtraq&m=142798889927587&w=2
http://secunia.com/advisories/52662
http://secunia.com/advisories/55568
http://www.debian.org/security/2013/dsa-2652
http://www.mandriva.com/security/advisories?name=MDVSA-2013:056
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
http://www.ubuntu.com/usn/USN-1782-1
https://bugzilla.redhat.com/show_bug.cgi?id=912400
https://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab

URL

CVE-2013-0338

Exploit prediction scoring system (EPSS) score for CVE-2013-0338

Common vulnerability scoring system (CVSS) metrics for CVE-2013-0338

Weakness enumeration for CVE-2013-0338

OS Trackers for CVE-2013-0338

NVD evaluator notes for CVE-2013-0338

Affected software / configurations for CVE-2013-0338

References for CVE-2013-0338