CVE catalog

CVE-2024-56171

libxml2 vulnerabilities

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.18% · Oct 25, 2026

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibxml2sid2.15.4+dfsg-1fixed
Debianlibxml2forky2.15.4+dfsg-1fixed
Debianlibxml2trixie2.12.7+dfsg+really2.9.14-2.1+deb13u3fixed
Debianlibxml2trixie-security2.12.7+dfsg+really2.9.14-2.1+deb13u1fixed
Debianlibxml2bookworm2.9.14+dfsg-1.3~deb12u6fixed
Debianlibxml2bookworm-security2.9.14+dfsg-1.3~deb12u4fixed
Ubuntulibxml2noble2.9.14+dfsg-1.3~deb12u2fixed
Ubuntulibxml2noble2.9.14+dfsg-1.3ubuntu3.2fixed
Ubuntulibxml2-devnoble2.9.14+dfsg-1.3ubuntu3.2fixed
Ubuntulibxml2-docnoble2.9.14+dfsg-1.3ubuntu3.2fixed
Ubuntulibxml2-utilsnoble2.9.14+dfsg-1.3ubuntu3.2fixed
Ubuntupython3-libxml2noble2.9.14+dfsg-1.3ubuntu3.2fixed
Alpinelibxml23.182.11.8-r1fixed
Alpinelibxml23.192.11.8-r1fixed
Alpinelibxml23.202.12.7-r1fixed
Alpinelibxml23.212.13.4-r4fixed
Alpinelibxml23.222.13.6-r0fixed
Alpinelibxml23.232.13.6-r0fixed
Alpinelibxml23.242.13.6-r0fixed
Ubuntulibxml2pro2.9.4+dfsg1-4ubuntu1vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-5ubuntu1vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-5ubuntu2vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-5.1ubuntu1vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-5.2ubuntu1vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.2vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.3vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.4vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.5vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.6vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.7vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.8vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.9vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.9+esm1vulnerable
Ubuntulibxml2pro2.9.4+dfsg1-6.1ubuntu1.9+esm2fixed
Ubuntulibxml220.042.9.4+dfsg1-7ubuntu3vulnerable
Ubuntulibxml220.042.9.4+dfsg1-7ubuntu5vulnerable
Ubuntulibxml220.042.9.4+dfsg1-8ubuntu1vulnerable
Ubuntulibxml220.042.9.4+dfsg1-8ubuntu2vulnerable
Ubuntulibxml220.042.9.4+dfsg1-8ubuntu3vulnerable
Ubuntulibxml220.042.9.10+dfsg-1ubuntu3vulnerable
Ubuntulibxml220.042.9.10+dfsg-4build1vulnerable
Ubuntulibxml220.042.9.10+dfsg-5vulnerable
Ubuntulibxml220.042.9.10+dfsg-5ubuntu0.20.04.1vulnerable
Ubuntulibxml220.042.9.10+dfsg-5ubuntu0.20.04.2vulnerable
Ubuntulibxml220.042.9.10+dfsg-5ubuntu0.20.04.3vulnerable
Ubuntulibxml220.042.9.10+dfsg-5ubuntu0.20.04.4vulnerable
Ubuntulibxml220.042.9.10+dfsg-5ubuntu0.20.04.5vulnerable
Ubuntulibxml220.042.9.10+dfsg-5ubuntu0.20.04.6vulnerable
Ubuntulibxml220.042.9.10+dfsg-5ubuntu0.20.04.7vulnerable
Ubuntulibxml220.042.9.10+dfsg-5ubuntu0.20.04.8vulnerable
Ubuntulibxml220.042.9.10+dfsg-5ubuntu0.20.04.9fixed
Ubuntulibxml222.042.9.12+dfsg-4vulnerable
Ubuntulibxml222.042.9.12+dfsg-5vulnerable
Ubuntulibxml222.042.9.12+dfsg-6vulnerable
Ubuntulibxml222.042.9.13+dfsg-1vulnerable
Ubuntulibxml222.042.9.13+dfsg-1build1vulnerable
Ubuntulibxml222.042.9.13+dfsg-1ubuntu0.1vulnerable
Ubuntulibxml222.042.9.13+dfsg-1ubuntu0.2vulnerable
Ubuntulibxml222.042.9.13+dfsg-1ubuntu0.3vulnerable
Ubuntulibxml222.042.9.13+dfsg-1ubuntu0.4vulnerable
Ubuntulibxml222.042.9.13+dfsg-1ubuntu0.5vulnerable
Ubuntulibxml222.042.9.13+dfsg-1ubuntu0.6fixed
Ubuntulibxml224.042.9.14+dfsg-1.3vulnerable
Ubuntulibxml224.042.9.14+dfsg-1.3build1vulnerable
Ubuntulibxml224.042.9.14+dfsg-1.3build2vulnerable
Ubuntulibxml224.042.9.14+dfsg-1.3build3vulnerable
Ubuntulibxml224.042.9.14+dfsg-1.3ubuntu1vulnerable
Ubuntulibxml224.042.9.14+dfsg-1.3ubuntu2vulnerable
Ubuntulibxml224.042.9.14+dfsg-1.3ubuntu3vulnerable
Ubuntulibxml224.042.9.14+dfsg-1.3ubuntu3.1vulnerable
Ubuntulibxml224.042.9.14+dfsg-1.3ubuntu3.2fixed
Suselibxml2linux micro 6.12.11.6-slfo.1.1_2.1fixed
Suselibxml2linux micro 6.02.11.6-5.1fixed
Suselibxml2linux enterprise high performance computing 15 sp3-ltss2.9.7-150000.3.76.1fixed
Susepython-libxml2-pythonlinux enterprise high performance computing 15 sp3-ltss2.9.7-150000.3.76.1fixed
Suselibxml2linux enterprise server 15 sp3-ltss2.9.7-150000.3.76.1fixed
Susepython-libxml2-pythonlinux enterprise server 15 sp3-ltss2.9.7-150000.3.76.1fixed
Suselibxml2linux enterprise server for sap applications 15 sp32.9.7-150000.3.76.1fixed
Susepython-libxml2-pythonlinux enterprise server for sap applications 15 sp32.9.7-150000.3.76.1fixed
Suselibxml2linux enterprise micro 5.12.9.7-150000.3.76.1fixed
Suselibxml2linux enterprise micro 5.22.9.7-150000.3.76.1fixed
Susepython-libxml2-pythonlinux enterprise micro 5.22.9.7-150000.3.76.1fixed
Suselibxml2enterprise storage 7.12.9.7-150000.3.76.1fixed
Susepython-libxml2-pythonenterprise storage 7.12.9.7-150000.3.76.1fixed
Opensusepython-libxml2-pythonleap 15.62.9.7-150000.3.76.1fixed
Opensuselibxml2tumbleweed2.13.6-1.1fixed
Suselibxml2linux enterprise server 12 sp5-ltss2.9.4-46.81.1fixed
Susepython-libxml2linux enterprise server 12 sp5-ltss2.9.4-46.81.1fixed
Suselibxml2linux enterprise server ltss extended security 12 sp52.9.4-46.81.1fixed
Susepython-libxml2linux enterprise server ltss extended security 12 sp52.9.4-46.81.1fixed
Suselibxml2linux enterprise micro 5.32.9.14-150400.5.38.1fixed
Suselibxml2-pythonlinux enterprise micro 5.32.9.14-150400.5.38.1fixed
Suselibxml2linux enterprise micro 5.42.9.14-150400.5.38.1fixed
Suselibxml2-pythonlinux enterprise micro 5.42.9.14-150400.5.38.1fixed
Suselibxml2linux enterprise high performance computing 15 sp4-espos2.9.14-150400.5.38.1fixed
Suselibxml2-pythonlinux enterprise high performance computing 15 sp4-espos2.9.14-150400.5.38.1fixed
Suselibxml2linux enterprise high performance computing 15 sp4-ltss2.9.14-150400.5.38.1fixed
Suselibxml2-pythonlinux enterprise high performance computing 15 sp4-ltss2.9.14-150400.5.38.1fixed
Suselibxml2linux enterprise server 15 sp4-ltss2.9.14-150400.5.38.1fixed
Suselibxml2-pythonlinux enterprise server 15 sp4-ltss2.9.14-150400.5.38.1fixed
Suselibxml2linux enterprise server for sap applications 15 sp42.9.14-150400.5.38.1fixed
Suselibxml2-pythonlinux enterprise server for sap applications 15 sp42.9.14-150400.5.38.1fixed
Suselibxml2manager proxy 4.32.9.14-150400.5.38.1fixed
Suselibxml2-pythonmanager proxy 4.32.9.14-150400.5.38.1fixed
Suselibxml2manager server 4.32.9.14-150400.5.38.1fixed
Suselibxml2-pythonmanager server 4.32.9.14-150400.5.38.1fixed
Suselibxml2linux enterprise micro 5.52.10.3-150500.5.23.1fixed
Suselibxml2-pythonlinux enterprise micro 5.52.10.3-150500.5.23.1fixed
Suselibxml2linux enterprise module for basesystem 15 sp62.10.3-150500.5.23.1fixed
Suselibxml2-pythonlinux enterprise module for basesystem 15 sp62.10.3-150500.5.23.1fixed
Suselibxml2-pythonlinux enterprise module for python 3 15 sp62.10.3-150500.5.23.1fixed
Suselibxml2linux enterprise high performance computing 15 sp5-espos2.10.3-150500.5.23.1fixed
Suselibxml2-pythonlinux enterprise high performance computing 15 sp5-espos2.10.3-150500.5.23.1fixed
Suselibxml2linux enterprise high performance computing 15 sp5-ltss2.10.3-150500.5.23.1fixed
Suselibxml2-pythonlinux enterprise high performance computing 15 sp5-ltss2.10.3-150500.5.23.1fixed
Suselibxml2linux enterprise server 15 sp5-ltss2.10.3-150500.5.23.1fixed
Suselibxml2-pythonlinux enterprise server 15 sp5-ltss2.10.3-150500.5.23.1fixed
Suselibxml2linux enterprise server for sap applications 15 sp52.10.3-150500.5.23.1fixed
Suselibxml2-pythonlinux enterprise server for sap applications 15 sp52.10.3-150500.5.23.1fixed
Opensuselibxml2leap 15.62.10.3-150500.5.23.1fixed
Opensuselibxml2-pythonleap 15.62.10.3-150500.5.23.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibxml2sourcesid2.12.7+dfsg+really2.9.14-0.4not yet assignedNot reported[1098320]
Debianlibxml2sourceforky2.12.7+dfsg+really2.9.14-0.4not yet assignedNot reported[1098320]
Debianlibxml2sourcetrixie2.12.7+dfsg+really2.9.14-0.4not yet assignedNot reported[1098320]
Debianlibxml2sourcebookworm2.9.14+dfsg-1.3~deb12u2not yet assignedNot reported[1098320]
Ubuntulibxml2debnoble2.9.14+dfsg-1.3~deb12u2Not reportedNot reportedNot reported
Ubuntulibxml2debnoble2.9.14+dfsg-1.3ubuntu3.2Not reportedNot reportedNot reported
Ubuntulibxml2-devdebnoble2.9.14+dfsg-1.3ubuntu3.2Not reportedNot reportedNot reported
Ubuntulibxml2-docdebnoble2.9.14+dfsg-1.3ubuntu3.2Not reportedNot reportedNot reported
Ubuntulibxml2-utilsdebnoble2.9.14+dfsg-1.3ubuntu3.2Not reportedNot reportedNot reported
Ubuntupython3-libxml2debnoble2.9.14+dfsg-1.3ubuntu3.2Not reportedNot reportedNot reported
Alpinelibxml2apk3.182.11.8-r1Not reportedALPINE-CVE-2024-56171Not reported
Alpinelibxml2apk3.192.11.8-r1Not reportedALPINE-CVE-2024-56171Not reported
Alpinelibxml2apk3.202.12.7-r1Not reportedALPINE-CVE-2024-56171Not reported
Alpinelibxml2apk3.212.13.4-r4Not reportedALPINE-CVE-2024-56171Not reported
Alpinelibxml2apk3.222.13.6-r0Not reportedALPINE-CVE-2024-56171Not reported
Alpinelibxml2apk3.232.13.6-r0Not reportedALPINE-CVE-2024-56171Not reported
Alpinelibxml2apk3.242.13.6-r0Not reportedALPINE-CVE-2024-56171Not reported
Ubuntulibxml2debpro2.9.4+dfsg1-6.1ubuntu1.9+esm2Not reportedUBUNTU-CVE-2024-56171Not reported
Ubuntulibxml2deb20.042.9.10+dfsg-5ubuntu0.20.04.9Not reportedUBUNTU-CVE-2024-56171Not reported
Ubuntulibxml2deb22.042.9.13+dfsg-1ubuntu0.6Not reportedUBUNTU-CVE-2024-56171Not reported
Ubuntulibxml2deb24.042.9.14+dfsg-1.3ubuntu3.2Not reportedUBUNTU-CVE-2024-56171Not reported
Suselibxml2rpmlinux micro 6.12.11.6-slfo.1.1_2.1Not reportedSUSE-SU-2025:20274-1Not reported
Suselibxml2rpmlinux micro 6.02.11.6-5.1Not reportedSUSE-SU-2025:20177-1Not reported
Suselibxml2rpmlinux enterprise high performance computing 15 sp3-ltss2.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Susepython-libxml2-pythonrpmlinux enterprise high performance computing 15 sp3-ltss2.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Suselibxml2rpmlinux enterprise server 15 sp3-ltss2.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Susepython-libxml2-pythonrpmlinux enterprise server 15 sp3-ltss2.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Suselibxml2rpmlinux enterprise server for sap applications 15 sp32.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Susepython-libxml2-pythonrpmlinux enterprise server for sap applications 15 sp32.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Suselibxml2rpmlinux enterprise micro 5.12.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Suselibxml2rpmlinux enterprise micro 5.22.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Susepython-libxml2-pythonrpmlinux enterprise micro 5.22.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Suselibxml2rpmenterprise storage 7.12.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Susepython-libxml2-pythonrpmenterprise storage 7.12.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Opensusepython-libxml2-pythonrpmleap 15.62.9.7-150000.3.76.1Not reportedSUSE-SU-2025:0976-1Not reported
Opensuselibxml2rpmtumbleweed2.13.6-1.1Not reportedOPENSUSE-SU-2025:14830-1Not reported
Suselibxml2rpmlinux enterprise server 12 sp5-ltss2.9.4-46.81.1Not reportedSUSE-SU-2025:0747-1Not reported
Susepython-libxml2rpmlinux enterprise server 12 sp5-ltss2.9.4-46.81.1Not reportedSUSE-SU-2025:0747-1Not reported
Suselibxml2rpmlinux enterprise server ltss extended security 12 sp52.9.4-46.81.1Not reportedSUSE-SU-2025:0747-1Not reported
Susepython-libxml2rpmlinux enterprise server ltss extended security 12 sp52.9.4-46.81.1Not reportedSUSE-SU-2025:0747-1Not reported
Suselibxml2rpmlinux enterprise micro 5.32.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2-pythonrpmlinux enterprise micro 5.32.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2rpmlinux enterprise micro 5.42.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2-pythonrpmlinux enterprise micro 5.42.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2rpmlinux enterprise high performance computing 15 sp4-espos2.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2-pythonrpmlinux enterprise high performance computing 15 sp4-espos2.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2rpmlinux enterprise high performance computing 15 sp4-ltss2.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2-pythonrpmlinux enterprise high performance computing 15 sp4-ltss2.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2rpmlinux enterprise server 15 sp4-ltss2.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2-pythonrpmlinux enterprise server 15 sp4-ltss2.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2rpmlinux enterprise server for sap applications 15 sp42.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2-pythonrpmlinux enterprise server for sap applications 15 sp42.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2rpmmanager proxy 4.32.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2-pythonrpmmanager proxy 4.32.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2rpmmanager server 4.32.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2-pythonrpmmanager server 4.32.9.14-150400.5.38.1Not reportedSUSE-SU-2025:0748-1Not reported
Suselibxml2rpmlinux enterprise micro 5.52.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2-pythonrpmlinux enterprise micro 5.52.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2rpmlinux enterprise module for basesystem 15 sp62.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2-pythonrpmlinux enterprise module for basesystem 15 sp62.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2-pythonrpmlinux enterprise module for python 3 15 sp62.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2rpmlinux enterprise high performance computing 15 sp5-espos2.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2-pythonrpmlinux enterprise high performance computing 15 sp5-espos2.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2rpmlinux enterprise high performance computing 15 sp5-ltss2.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2-pythonrpmlinux enterprise high performance computing 15 sp5-ltss2.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2rpmlinux enterprise server 15 sp5-ltss2.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2-pythonrpmlinux enterprise server 15 sp5-ltss2.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2rpmlinux enterprise server for sap applications 15 sp52.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Suselibxml2-pythonrpmlinux enterprise server for sap applications 15 sp52.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Opensuselibxml2rpmleap 15.62.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported
Opensuselibxml2-pythonrpmleap 15.62.10.3-150500.5.23.1Not reportedSUSE-SU-2025:0746-1Not reported

[Debian bug #1098320]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References