{"id":"CVE-2017-7376","title":"Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.","summary":"Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-119"],"vendor":"xmlsoft","product":"libxml2","affected":["libxml2 < 2.9.5","android = 4.4.4","android = 5.0.2","android = 5.1.1","android = 6.0","android = 6.0.1","android = 7.0","android = 7.1.1","android = 7.1.2","debian_linux = 8.0","debian_linux = 9.0"],"patched":["libxml2 2.9.5"],"published":"2018-02-19","updated":"2026-10-14","sourceUpdated":"2026-10-14T07:16:40.573","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2017-7376","references":[{"url":"http://www.securityfocus.com/bid/98877","label":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1038623","label":"cve@mitre.org"},{"url":"https://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4","label":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1462216","label":"cve@mitre.org"},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e","label":"cve@mitre.org"},{"url":"https://source.android.com/security/bulletin/2017-06-01","label":"cve@mitre.org"},{"url":"https://www.debian.org/security/2017/dsa-3952","label":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/98877","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1038623","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/libxml2/+/51e0cb2e5ec18eaf6fb331bc573ff27b743898f4","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1462216","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=5dca9eea1bd4263bfa4d037ab2443de1cd730f7e","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2017-06-01","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2017/dsa-3952","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","exploit-available"],"epss":0.23286,"epssPercentile":0.97739,"exploits":{"github":1,"githubRepos":["https://github.com/brahmstaedt/libxml2-exploit"],"checkedAt":"2026-10-14T07:21:40.621Z"},"exploitAvailable":true,"ingestedAt":"2026-10-14T07:21:04.799Z","slug":"CVE-2017-7376","body":"## Overview\n\nBuffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.\n\n## Affected\n\n- `libxml2 < 2.9.5`\n- `android = 4.4.4`\n- `android = 5.0.2`\n- `android = 5.1.1`\n- `android = 6.0`\n- `android = 6.0.1`\n- `android = 7.0`\n- `android = 7.1.1`\n- `android = 7.1.2`\n- `debian_linux = 8.0`\n- `debian_linux = 9.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `libxml2 2.9.5`","depth":"abyssal","depthScore":71,"depthScoreParts":{"impact":53.9,"likelihood":4.7,"exploitation":12,"ransomware":0},"changes":[]}