Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libxml-libxml-perl@1.70.ds-1
purl pkg:deb/debian/libxml-libxml-perl@1.70.ds-1
Next non-vulnerable version 2.0134+dfsg-1
Latest non-vulnerable version 2.0207+dfsg+really+2.0134-8
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-5nmu-rws2-p7fg
Aliases:
CVE-2015-3451
The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.
2.0001+dfsg-1+deb7u1
Affected by 2 other vulnerabilities.
2.0116+dfsg-1+deb8u2
Affected by 2 other vulnerabilities.
2.0128+dfsg-1+deb9u1
Affected by 1 other vulnerability.
VCID-brs8-trgj-jbc5
Aliases:
CVE-2017-10672
arbitrary code execution
2.0116+dfsg-1+deb8u2
Affected by 2 other vulnerabilities.
2.0128+dfsg-1+deb9u1
Affected by 1 other vulnerability.
2.0134+dfsg-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T00:35:21.992768+00:00 Debian Oval Importer Affected by VCID-5nmu-rws2-p7fg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-04T20:47:01.494028+00:00 Debian Oval Importer Affected by VCID-5nmu-rws2-p7fg https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.6.0
2026-06-04T20:05:19.227040+00:00 Debian Oval Importer Affected by VCID-5nmu-rws2-p7fg https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 38.6.0
2026-06-02T03:17:03.593970+00:00 Debian Oval Importer Affected by VCID-brs8-trgj-jbc5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-01T22:05:42.927265+00:00 Debian Oval Importer Affected by VCID-brs8-trgj-jbc5 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 38.6.0
2026-06-01T21:07:21.538171+00:00 Debian Oval Importer Affected by VCID-brs8-trgj-jbc5 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 38.6.0