CVE-2017-16931
parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandl
parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.
CRITICAL · CVSS 9.8
EPSS 0.01443
Schedule remediation
- CVSS base score ≥ 7.0
Sigma rules0
YARA rules0