Search for packages
Package details: pkg:conan/libxml2@2.11.6
purl pkg:conan/libxml2@2.11.6
Next non-vulnerable version 2.11.9
Latest non-vulnerable version 2.12.9
Risk 3.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-g16k-s1p7-aaaj
Aliases:
CVE-2024-25062
libxml2: use-after-free in XMLReader
2.11.7
Affected by 0 other vulnerabilities.
2.11.9
Affected by 0 other vulnerabilities.
2.12.5
Affected by 0 other vulnerabilities.
2.12.9
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-2fyr-85vm-aaak ** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail." CVE-2023-45322

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:52:22.523668+00:00 GitLab Importer Affected by VCID-g16k-s1p7-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libxml2/CVE-2024-25062.yml 36.1.3
2025-06-20T16:44:48.101229+00:00 GitLab Importer Fixing VCID-2fyr-85vm-aaak None 36.1.3
2025-06-03T23:29:42.232862+00:00 GitLab Importer Affected by VCID-g16k-s1p7-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libxml2/CVE-2024-25062.yml 36.1.0
2025-06-03T23:22:56.308762+00:00 GitLab Importer Fixing VCID-2fyr-85vm-aaak None 36.1.0
2025-06-02T23:27:22.260814+00:00 GitLab Importer Affected by VCID-g16k-s1p7-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libxml2/CVE-2024-25062.yml 36.1.2
2025-06-02T23:20:20.305198+00:00 GitLab Importer Fixing VCID-2fyr-85vm-aaak None 36.1.2
2025-04-03T21:54:17.295435+00:00 GitLab Importer Affected by VCID-g16k-s1p7-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libxml2/CVE-2024-25062.yml 36.0.0
2025-04-03T21:38:40.932295+00:00 GitLab Importer Fixing VCID-2fyr-85vm-aaak None 36.0.0
2025-02-18T01:06:50.022073+00:00 GitLab Importer Affected by VCID-g16k-s1p7-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libxml2/CVE-2024-25062.yml 35.1.0
2025-02-18T01:05:07.733788+00:00 GitLab Importer Fixing VCID-2fyr-85vm-aaak None 35.1.0
2024-11-20T23:31:25.148573+00:00 GitLab Importer Affected by VCID-g16k-s1p7-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libxml2/CVE-2024-25062.yml 35.0.0
2024-11-18T23:20:34.540159+00:00 GitLab Importer Affected by VCID-g16k-s1p7-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libxml2/CVE-2024-25062.yml 34.3.2
2024-10-08T00:17:42.255294+00:00 GitLab Importer Affected by VCID-g16k-s1p7-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libxml2/CVE-2024-25062.yml 34.0.2
2024-09-23T00:31:39.584001+00:00 GitLab Importer Affected by VCID-g16k-s1p7-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libxml2/CVE-2024-25062.yml 34.0.1
2024-04-24T02:41:37.606690+00:00 GitLab Importer Fixing VCID-2fyr-85vm-aaak None 34.0.0rc4
2024-01-10T05:16:57.252067+00:00 GitLab Importer Fixing VCID-2fyr-85vm-aaak None 34.0.0rc2
2024-01-03T22:04:47.334239+00:00 GitLab Importer Fixing VCID-2fyr-85vm-aaak None 34.0.0rc1