alpine · CVE-2017-16932

Quick triage

Priority: not assigned Published: Updated:

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2017-16932: 2 source package rows (clamav, libxml2); 25 state rows across 15 repos (3.10-main, 3.11-main, 3.12-main, 3.17-community, 3.18-community, 3.19-community, 3.19-main, 3.20-community, 3.20-main, 3.21-community, 3.21-main, 3.22-community, 3.22-main, edge-community, edge-main); fixed 10, open 15.

Description:

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

cvelogic Threat Intelligence