Debian/libxml2: medium 6.5

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consu

Action: Upgrade libxml2 to 2.6.32.dfsg-3 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-3281#Debian:13/libxml2
• https://security-tracker.debian.org/tracker/CVE-2008-3281

published 2008-08-27T20:41:00Z · modified 2026-10-23T18:00:45.274975360Z · JSON