Known vulnerabilities in libxml2 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libxml2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 33
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libxml2 (Ubuntu package) libxml2 (Ubuntu package) is affected by 33 known vulnerabilities: 12 high, 19 medium, 2 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122089 - Resource exhaustion
CVE-2026-0992
CWE-400 Medium
No
No
2.9.1+dfsg1-3ubuntu4.13+esm11, 2.9.3+dfsg1-1ubuntu0.7+esm12, 2.9.4+dfsg1-6.1ubuntu1.9+esm7, 2.9.10+dfsg-5ubuntu0.20.04.10+esm4, 2.9.13+dfsg-1ubuntu0.11, 2.9.14+dfsg-1.3ubuntu3.7, 2.14.5+dfsg-0.2ubuntu0.1 27.01.2026 SB2026012787
SB2026012788
SB2026022043
and 7 more
#VU122088 - Uncontrolled Recursion
CVE-2026-0990
CWE-674 Medium
No
No
2.9.1+dfsg1-3ubuntu4.13+esm11, 2.9.3+dfsg1-1ubuntu0.7+esm12, 2.9.4+dfsg1-6.1ubuntu1.9+esm7, 2.9.10+dfsg-5ubuntu0.20.04.10+esm4, 2.9.13+dfsg-1ubuntu0.11, 2.9.14+dfsg-1.3ubuntu3.7, 2.14.5+dfsg-0.2ubuntu0.1 27.01.2026 SB2026012787
SB2026012788
SB2026022043
and 7 more
#VU122087 - Uncontrolled Recursion
CVE-2026-0989
CWE-674 Medium
No
No
2.9.1+dfsg1-3ubuntu4.13+esm11, 2.9.3+dfsg1-1ubuntu0.7+esm12, 2.9.4+dfsg1-6.1ubuntu1.9+esm7, 2.9.10+dfsg-5ubuntu0.20.04.10+esm4, 2.9.13+dfsg-1ubuntu0.11, 2.9.14+dfsg-1.3ubuntu3.7, 2.14.5+dfsg-0.2ubuntu0.1 27.01.2026 SB2026012787
SB2026012788
SB2026012963
and 9 more
#VU117630 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8732
CWE-835 Low
No
No
2.9.1+dfsg1-3ubuntu4.13+esm11, 2.9.3+dfsg1-1ubuntu0.7+esm12, 2.9.4+dfsg1-6.1ubuntu1.9+esm7, 2.9.10+dfsg-5ubuntu0.20.04.10+esm4, 2.9.13+dfsg-1ubuntu0.11, 2.9.14+dfsg-1.3ubuntu3.7, 2.14.5+dfsg-0.2ubuntu0.1 24.10.2025 SB2025102413
SB20251114100
SB2025111742
and 5 more
#VU115166 - Uncontrolled Recursion
CVE-2025-9714
CWE-674 Medium
No
No
2.9.1+dfsg1-3ubuntu4.13+esm9, 2.9.3+dfsg1-1ubuntu0.7+esm10, 2.9.4+dfsg1-6.1ubuntu1.9+esm5, 2.9.10+dfsg-5ubuntu0.20.04.10+esm2, 2.9.13+dfsg-1ubuntu0.9, 2.9.14+dfsg-1.3ubuntu3.5, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 11.09.2025 SB2025091153
SB2025091154
SB2025091275
and 35 more
#VU113533 - Use After Free
CVE-2025-7425
CWE-416 High
No
No
2.9.1+dfsg1-3ubuntu4.13+esm10, 2.9.3+dfsg1-1ubuntu0.7+esm11, 2.9.4+dfsg1-6.1ubuntu1.9+esm6, 2.9.10+dfsg-5ubuntu0.20.04.10+esm3, 2.9.13+dfsg-1ubuntu0.10, 2.9.14+dfsg-1.3ubuntu3.6, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.4 31.07.2025 SB2025073137
SB2025073144
SB2025073053
and 56 more
#VU107596 - Heap-based Buffer Overflow
CVE-2025-32415
CWE-122 High
No
No
Ubuntu Pro (Infra-only), 2.9.1+dfsg1-3ubuntu4.13+esm10, 2.9.10+dfsg-5ubuntu0.20.04.10, 2.9.13+dfsg-1ubuntu0.7, 2.9.14+dfsg-1.3ubuntu3.3, 2.12.7+dfsg-3ubuntu0.3, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1 17.04.2025 SB2025041758
SB2025041880
SB2025042531
and 56 more
#VU107595 - Out-of-bounds read
CVE-2025-32414
CWE-125 Medium
No
No
Ubuntu Pro (Infra-only), 2.9.1+dfsg1-3ubuntu4.13+esm10, 2.9.10+dfsg-5ubuntu0.20.04.10, 2.9.13+dfsg-1ubuntu0.7, 2.9.14+dfsg-1.3ubuntu3.3, 2.12.7+dfsg-3ubuntu0.3, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1 17.04.2025 SB2025041758
SB2025041850
SB2025041880
and 56 more
#VU104213 - NULL Pointer Dereference
CVE-2025-27113
CWE-476 Medium
No
No
Ubuntu Pro (Infra-only), 2.9.10+dfsg-5ubuntu0.20.04.9, 2.9.13+dfsg-1ubuntu0.6, 2.9.14+dfsg-1.3ubuntu3.2, 2.12.7+dfsg-3ubuntu0.2 26.02.2025 SB2025022619
SB2025022621
SB2025022890
and 32 more
#VU104099 - Use After Free
CVE-2024-56171
CWE-416 High
No
No
Ubuntu Pro (Infra-only), 2.9.10+dfsg-5ubuntu0.20.04.9, 2.9.13+dfsg-1ubuntu0.6, 2.9.14+dfsg-1.3ubuntu3.2, 2.12.7+dfsg-3ubuntu0.2 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928
CWE-121 High
No
No
Ubuntu Pro (Infra-only), 2.9.10+dfsg-5ubuntu0.20.04.9, 2.9.13+dfsg-1ubuntu0.6, 2.9.14+dfsg-1.3ubuntu3.2, 2.12.7+dfsg-3ubuntu0.2 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU103502 - Use After Free
CVE-2022-49043
CWE-416 Medium
No
No
Ubuntu Pro (Infra-only), 2.9.10+dfsg-5ubuntu0.20.04.8, 2.9.10+dfsg-5ubuntu0.20.04.9, 2.9.13+dfsg-1ubuntu0.5, 2.9.13+dfsg-1ubuntu0.6, 2.9.14+dfsg-1.3ubuntu3.1, 2.9.14+dfsg-1.3ubuntu3.2, 2.12.7+dfsg-3ubuntu0.2 03.02.2025 SB2025020327
SB2025020330
SB2025020353
and 60 more
#VU96997 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-40896
CWE-611 High
No
No
2.12.7+dfsg-3ubuntu0.1 10.09.2024 SB2024091054
SB2024091056
SB2024091071
and 10 more
#VU89430 - Heap-based Buffer Overflow
CVE-2024-34459
CWE-122 Medium
No
No
Ubuntu Pro (Infra-only), 2.9.10+dfsg-5ubuntu0.20.04.8, 2.9.10+dfsg-5ubuntu0.20.04.9, 2.9.13+dfsg-1ubuntu0.5, 2.9.13+dfsg-1ubuntu0.6, 2.9.14+dfsg-1.3ubuntu3.1, 2.9.14+dfsg-1.3ubuntu3.2, 2.12.7+dfsg-3ubuntu0.2 14.05.2024 SB2024051432
SB2024051433
SB2024051631
and 31 more
#VU86052 - Use After Free
CVE-2024-25062
CWE-416 High
No
No
Ubuntu Pro (Infra-only), 2.9.10+dfsg-5ubuntu0.20.04.7, 2.9.13+dfsg-1ubuntu0.4, 2.9.14+dfsg-1.3ubuntu0.1 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484
CWE-476 Medium
No
No
Ubuntu Pro (Infra-only), 2.9.4+dfsg1-6.1ubuntu1.9, 2.9.10+dfsg-5ubuntu0.20.04.6, 2.9.13+dfsg-1ubuntu0.3, 2.9.14+dfsg-1.1ubuntu0.1, 2.9.14+dfsg-1ubuntu0.2 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469
CWE-399 Medium
No
No
Ubuntu Pro (Infra-only), 2.9.4+dfsg1-6.1ubuntu1.9, 2.9.10+dfsg-5ubuntu0.20.04.6, 2.9.13+dfsg-1ubuntu0.3, 2.9.14+dfsg-1.1ubuntu0.1, 2.9.14+dfsg-1ubuntu0.2 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU68829 - Resource Management Errors
CVE-2022-40304
CWE-399 Medium
No
No
Ubuntu Pro (Infra-only), 2.9.4+dfsg1-6.1ubuntu1.8, 2.9.10+dfsg-5ubuntu0.20.04.5, 2.9.13+dfsg-1ubuntu0.2, 2.9.14+dfsg-1ubuntu0.1 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303
CWE-190 High
No
No
Ubuntu Pro (Infra-only), 2.9.4+dfsg1-6.1ubuntu1.8, 2.9.10+dfsg-5ubuntu0.20.04.5, 2.9.13+dfsg-1ubuntu0.2, 2.9.14+dfsg-1ubuntu0.1 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU66813 - NULL Pointer Dereference
CVE-2022-2309
CWE-476 Medium
No
No
2.9.4+dfsg1-6.1ubuntu1.8, 2.9.10+dfsg-5ubuntu0.20.04.5, 2.9.13+dfsg-1ubuntu0.2, 2.9.14+dfsg-1.1ubuntu0.1, 2.9.14+dfsg-1ubuntu0.1 29.08.2022 SB2022082928
SB2022082929
SB2022082930
and 28 more


Showing elements 1 - 20 out of 33