Vulnerability Database · Debian · libxml2 · Version

libxml2 2.9.10 dfsg-6.7 deb11u5

2.9.10 dfsg-6.7 deb11u5 is affected by 38 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 1 Medium 2 Low 2 Unrated 33

Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

libxml2 2.9.10 dfsg-6.7 deb11u5 vulnerabilities

38 vulnerabilities cover libxml2 2.9.10 dfsg-6.7 deb11u5. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Use-After-Free Vulnerability in libxml2 XML Parsing Library 7.5 high No fix published 07 Nov 2025
CVE-2023-45322: libxml2 - use-after-free in xmlUnlinkNode() in tree.c 6.5 medium 2.9.10+dfsg-6.7+deb11u6 06 Oct 2023
CVE-2023-39615: libxml2 - Crafted XML Can Cause Global Buffer Overflow 6.5 medium 2.9.10+dfsg-6.7+deb11u6 29 Aug 2023
Uncontrolled Recursion Vulnerability in libxml2: CVE-2025-8732 3.3 low No fix published 08 Aug 2025
Buffer Overflow Vulnerability in libxml2's xmllint Tool 2.5 low 2.9.10+dfsg-6.7+deb11u8 16 Jun 2025
Stack-Based Buffer Overflow in libxml2's xmlcatalog Utility N/A unrated No fix published 29 Jun 2026
Critical Use After Free Vulnerability in libxml2 Package N/A unrated No fix published 22 Jun 2026
Denial of Service Vulnerability in libxml2: CVE-2026-6732 N/A unrated No fix published 24 Apr 2026
Critical Security Update for libxml2: Addressing CVE-2025-9714 N/A unrated 2.9.10+dfsg-6.7+deb11u9 30 Sep 2025
Stack Overflow Vulnerability in libxml2: Uncontrolled Recursion in XPath Evaluation N/A unrated No fix published 10 Sep 2025
Buffer Overflow Vulnerability in libxml2: Potential Information Disclosure N/A unrated No fix published 05 Sep 2025
Uncontrolled Recursion Vulnerability in libxml2: CVE-2025-8732 N/A unrated No fix published 08 Aug 2025
Critical Security Update for libxml2: Addressing Multiple Vulnerabilities N/A unrated 2.9.10+dfsg-6.7+deb11u8 26 Jul 2025
Critical Vulnerability in libxml2: Buffer Overflow in xmllint Command-Line Tool N/A unrated 2.9.10+dfsg-6.7+deb11u8 16 Jun 2025
Memory Corruption Vulnerability in libxml2: Denial of Service Risk N/A unrated 2.9.10+dfsg-6.7+deb11u8 16 Jun 2025
Memory Corruption Vulnerability in libxml2: Denial of Service Risk N/A unrated 2.9.10+dfsg-6.7+deb11u8 16 Jun 2025
Use-After-Free Vulnerability in libxml2: Risk of Crashes and Undefined Behavior N/A unrated 2.9.10+dfsg-6.7+deb11u8 16 Jun 2025
Critical Use-After-Free Vulnerability in libxml2: Potential Crash and Undefined Behavior N/A unrated 2.9.10+dfsg-6.7+deb11u8 16 Jun 2025
Integer Overflow Vulnerability in libxml2 Leading to Buffer Overflow N/A unrated 2.9.10+dfsg-6.7+deb11u8 12 Jun 2025
Integer Overflow Vulnerability in libxml2: Potential Stack-Based Buffer Overflow N/A unrated 2.9.10+dfsg-6.7+deb11u8 12 Jun 2025
Critical Security Update for libxml2: Addressing CVE-2025-32414 and CVE-2025-32415 N/A unrated 2.9.10+dfsg-6.7+deb11u7 30 Apr 2025
Heap-Based Buffer Under-read in libxml2: CVE-2025-32415 N/A unrated 2.9.10+dfsg-6.7+deb11u7 17 Apr 2025
Out-of-Bounds Memory Access in libxml2 Python API N/A unrated 2.9.10+dfsg-6.7+deb11u7 08 Apr 2025
Critical Security Update for libxml2: Addressing Multiple Vulnerabilities N/A unrated 2.9.10+dfsg-6.7+deb11u6 22 Feb 2025
Critical NULL Pointer Dereference Vulnerability in libxml2 N/A unrated 2.9.10+dfsg-6.7+deb11u6 18 Feb 2025
Stack-Based Buffer Overflow in libxml2: Critical Vulnerability Overview N/A unrated 2.9.10+dfsg-6.7+deb11u6 18 Feb 2025
Critical Use-After-Free Vulnerability in libxml2: CVE-2024-56171 N/A unrated 2.9.10+dfsg-6.7+deb11u6 18 Feb 2025
Critical Use-After-Free Vulnerability in libxml2 Package N/A unrated 2.9.10+dfsg-6.7+deb11u6 26 Jan 2025
Use-After-Free Vulnerability in libxml2: CVE-2022-49043 N/A unrated 2.9.10+dfsg-6.7+deb11u6 26 Jan 2025
Buffer Over-read Vulnerability in libxml2: xmllint Formatting Error N/A unrated 2.9.10+dfsg-6.7+deb11u8 14 May 2024
Critical Use-After-Free Vulnerability in libxml2 Affects Multiple Debian Versions N/A unrated 2.9.10+dfsg-6.7+deb11u6 04 Feb 2024
Use-After-Free Vulnerability in libxml2: Risk of Memory Allocation Failures N/A unrated 2.9.10+dfsg-6.7+deb11u6 06 Oct 2023
Out-of-Bounds Read Vulnerability in libxml2: Denial of Service Risk N/A unrated 2.9.10+dfsg-6.7+deb11u6 29 Aug 2023
Denial of Service Vulnerability in libxml2: Exponential Entity Expansion Attack N/A unrated 2.9.10+dfsg-6.7 09 Jul 2021
Critical Vulnerability in libxml2: CVE-2026-0989 Exposes Systems to Potential Attacks N/A unrated No fix published 30 Nov -0001
Critical Vulnerability in libxml2: CVE-2026-0990 Exposes Systems to Potential Attacks N/A unrated No fix published 30 Nov -0001
Critical Vulnerability in libxml2: Potential Security Risks Identified N/A unrated No fix published 30 Nov -0001
Critical Vulnerability in libxml2: CVE-2026-1757 N/A unrated No fix published 30 Nov -0001

Looking for another version, or everything Vulert holds for libxml2?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About libxml2 2.9.10 dfsg-6.7 deb11u5

Is libxml2 2.9.10 dfsg-6.7 deb11u5 vulnerable?

Yes. 38 vulnerabilities in the Vulert database cover libxml2 2.9.10 dfsg-6.7 deb11u5: 0 critical, 1 high, 2 medium and 2 low, plus 33 not yet rated. Each entry above names the fixed version to move to.

How do I monitor libxml2 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the libxml2 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.