CVE-2017-9048
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow.
Published May 18, 2017 · updated Oct 14, 2026 · xmlsoft libxml2
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash.
Timeline
Detection, updates, and resolution for this record.
May 18, 2017 · NIST NVD
Detected
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes prog
Oct 14, 2026 · NIST NVD
Updated
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes prog
Oct 14, 2026 · OSV.dev
Fix available
libxml2 fixed in 2.9.4+dfsg1-3.1; libxml2 fixed in 2.9.4+dfsg1-3.1; libxml2 fixed in 2.9.4+dfsg1-3.1
Oct 14, 2026 · OSV.dev
Fix available
libxml2 fixed in 2.9.4+dfsg1-3.1
Oct 14, 2026 · OSV.dev
Updated
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes prog
Affected
- Debian:12 libxml20 → 2.9.4+dfsg1-3.1
- Debian:13 libxml20 → 2.9.4+dfsg1-3.1
- Debian:14 libxml20 → 2.9.4+dfsg1-3.1
- cpe xmlsoft/libxml22.9.4
Sources
- CVE.orgCVE-2017-9048
Official CVE identifier
cve.org - NIST NVDCVE-2017-9048
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function ma
nvd.nist.gov - OSV.devDEBIAN-CVE-2017-9048osv.dev