Findings

CVE-2017-16932

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

Published Nov 23, 2017 · updated Oct 14, 2026 · xmlsoft libxml2

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 23, 2017 · NIST NVD

    Detected

    parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

  2. Oct 14, 2026 · NIST NVD

    Updated

    parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

Affected

  • cpe xmlsoft/libxml2version unspecified

Sources

  • NIST NVDCVE-2017-16932

    parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

    nvd.nist.gov

References