Skip to content
COOEY

EXPOSURES › CVE-2017-16931

CVE-2017-16931

CRITICAL
DETAIL
SourceNVD · cve Published2017-11-23 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-16931 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
xmlsoft · vendorlibxml2 · product
DESCRIPTION

parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.

SENTIMENT · TRUSTED SOURCES
synthesis neutral +0.00
No public sentiment data available; only technical facts and a failed search query.
cooey ↗ neutral +0.00
Neutral; only technical description provided.
"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name."
127.0.0.1 ↗ neutral +0.00
Neutral; no content available.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.