CVE-2024-25062 json
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5
published 2y ago modified 28d ago also BIT-java-2024-25062 , BIT-java-min-2024-25062 , BIT-jre-2024-25062 , EUVD-2024-22424 , JLSEC-2025-83
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.3%
- EPSS 1.3% chance of exploitation in 30 days, percentile 71%
- public exploits
- 0
- none known
Summary
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.
Patch / fix
- bitnami java 1.8.0, 8.0.431
- bitnami java-min 1.8.0, 8.0.431
- bitnami jre 1.8.0, 8.0.431
- julia XML2_jll 2.12.5+0
- Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem V1.1
- Siemens SINEC NMS V3.0
- libxml2 Debian 12 2.9.14+dfsg-1.3~deb12u2
- libxml2 Debian 14, Debian 13 2.12.7+dfsg+really2.9.14-1
debian advisories DEBIAN-CVE-2024-25062
- libxml2 Ubuntu 20.04 LTS 2.9.10+dfsg-5ubuntu0.20.04.7
- libxml2 Ubuntu 22.04 LTS 2.9.13+dfsg-1ubuntu0.4
- libxml2 Ubuntu Pro 14.04 LTS 2.9.1+dfsg1-3ubuntu4.13+esm6
- libxml2 Ubuntu Pro 16.04 LTS 2.9.3+dfsg1-1ubuntu0.7+esm6
- libxml2 Ubuntu Pro 18.04 LTS 2.9.4+dfsg1-6.1ubuntu1.9+esm1
ubuntu advisories UBUNTU-CVE-2024-25062
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- libxml2 RHEL 8 2.9.7-18.el8_10.1
- python3-libxml2 RHEL 8 2.9.7-18.el8_10.1
- libxml2 RHEL 9 2.9.13-6.el9_4
- python3-libxml2 RHEL 9 2.9.13-6.el9_4
- libxml2 RHEL 9.2 EUS 2.9.13-3.el9_2.3
- python3-libxml2 RHEL 9.2 EUS 2.9.13-3.el9_2.3
- libxml2 RHEL 8.8 EUS 2.9.7-16.el8_8.4
- python3-libxml2 RHEL 8.8 EUS 2.9.7-16.el8_8.4
red hat advisories RHSA-2024:3626RHSA-2024:3625RHSA-2024:3303RHSA-2024:3299RHSA-2024:2679
- libxml2 SLE Micro 5.4, SLE Micro 5.3, SLE High Performance Computing 15 SP4-ESPOS +7 more 2.9.14-150400.5.28.1
- libxml2-python SLE Micro 5.4, SLE Micro 5.3, SLE High Performance Computing 15 SP4-ESPOS +7 more 2.9.14-150400.5.28.1
- libxml2 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 2.9.4-46.71.1
- python-libxml2 SLES for SAP 12 SP5, SLES 12 SP5 2.9.4-46.71.1
- libxml2 SLE Micro 5.2, SLE Micro 5.1, Enterprise Storage 7.1 +6 more 2.9.7-150000.3.66.1
- python-libxml2-python SLE Micro 5.2, openSUSE Leap 15.5, Enterprise Storage 7.1 +6 more 2.9.7-150000.3.66.1
- libxml2 SLE Module for Basesystem 15 SP5, SLE Micro 5.5, openSUSE Leap 15.5 2.10.3-150500.5.14.1
- libxml2-python SLE Module for Python 3 15 SP5, SLE Module for Basesystem 15 SP5, SLE Micro 5.5 +1 more 2.10.3-150500.5.14.1
suse advisories SUSE-SU-2024:0613-1SUSE-SU-2024:0613-2SUSE-SU-2024:0556-1SUSE-SU-2024:0461-1SUSE-SU-2024:0461-2SUSE-SU-2024:0555-1
- libxml2 openSUSE Tumbleweed 2.11.6-2.1
opensuse advisories openSUSE-SU-2024:13676-1
- libxml2 AlmaLinux 8 2.9.7-18.el8_10.1
- python3-libxml2 AlmaLinux 8 2.9.7-18.el8_10.1
- libxml2 AlmaLinux 9 2.9.13-6.el9_4
- python3-libxml2 AlmaLinux 9 2.9.13-6.el9_4
almalinux advisories ALSA-2024:3626ALSA-2024:2679
- libxml2 Rocky Linux 8 2.9.7-18.el8_10.1
- libxml2 Rocky Linux 9 2.9.13-6.el9_4
rocky linux advisories RLSA-2024:3626RLSA-2024:2679
- libxml2 Alpine 3.19, Alpine 3.18 2.11.7-r0
- libxml2 Alpine 3.24, Alpine 3.23, Alpine 3.22 +2 more 2.12.5-r0
- qt6-qtwebengine Alpine 3.19 6.6.1-r9
- qt6-qtwebengine Alpine 3.24, Alpine 3.23, Alpine 3.22 +2 more 6.6.3-r1
alpine advisories ALPINE-CVE-2024-25062
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- libxml2 CBL-Mariner 2.0 2.10.4-4
- libxml2 Azure Linux 3.0 2.11.5-4
azure linux advisories AZL-34290AZL-34961
Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT
Is CVE-2024-25062 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerVendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2024-25062 updated cvss 7.5
libxml2: use-after-free in XMLReader
-
Red Hat Enterprise Linux 6 libxml2, libxml2-python Red Hat Enterprise Linux 7 libxml2, libxml2-pythonaffected: workaround, no fix planned “Out of support scope”
-
Red Hat Satellite 6 puppet-agentaffected: workaround, no fix available
-
Red Hat Enterprise Linux AppStream (v. 8) libxml2-devel 2.9.7-18.el8_10.1, libxml2-debuginfo 2.9.7-18.el8_10.1, libxml2-debugsource 2.9.7-18.el8_10.1, python3-libxml2-debuginfo 2.9.7-18.el8_10.1fixed: vendor fix RHSA-2024:3626
-
Red Hat Enterprise Linux AppStream (v. 9) libxml2-devel 2.9.13-6.el9_4, libxml2-debuginfo 2.9.13-6.el9_4, libxml2-debugsource 2.9.13-6.el9_4, python3-libxml2-debuginfo 2.9.13-6.el9_4fixed: vendor fix RHSA-2024:2679
-
Red Hat Enterprise Linux AppStream EUS (v.8.6) libxml2-devel 2.9.7-13.el8_6.5, libxml2-debuginfo 2.9.7-13.el8_6.5, libxml2-debugsource 2.9.7-13.el8_6.5, python3-libxml2-debuginfo 2.9.7-13.el8_6.5fixed: vendor fix RHSA-2024:3299
-
Red Hat Enterprise Linux AppStream EUS (v.8.8) libxml2-devel 2.9.7-16.el8_8.4, libxml2-debuginfo 2.9.7-16.el8_8.4, libxml2-debugsource 2.9.7-16.el8_8.4, python3-libxml2-debuginfo 2.9.7-16.el8_8.4fixed: vendor fix RHSA-2024:3303
-
Red Hat Enterprise Linux AppStream EUS (v.9.2) libxml2-devel 2.9.13-3.el9_2.3, libxml2-debuginfo 2.9.13-3.el9_2.3, libxml2-debugsource 2.9.13-3.el9_2.3, python3-libxml2-debuginfo 2.9.13-3.el9_2.3fixed: vendor fix RHSA-2024:3625
-
Red Hat Enterprise Linux BaseOS (v. 8) libxml2 2.9.7-18.el8_10.1, python3-libxml2 2.9.7-18.el8_10.1fixed: vendor fix RHSA-2024:3626
show 5 moreshow fewer
-
Red Hat Enterprise Linux BaseOS (v. 9) libxml2 2.9.13-6.el9_4, python3-libxml2 2.9.13-6.el9_4fixed: vendor fix RHSA-2024:2679
-
Red Hat Enterprise Linux BaseOS EUS (v.8.6) libxml2 2.9.7-13.el8_6.5, python3-libxml2 2.9.7-13.el8_6.5fixed: vendor fix RHSA-2024:3299
-
Red Hat Enterprise Linux BaseOS EUS (v.8.8) libxml2 2.9.7-16.el8_8.4, python3-libxml2 2.9.7-16.el8_8.4fixed: vendor fix RHSA-2024:3303
-
Red Hat Enterprise Linux BaseOS EUS (v.9.2) libxml2 2.9.13-3.el9_2.3, python3-libxml2 2.9.13-3.el9_2.3fixed: vendor fix RHSA-2024:3625
-
Red Hat JBoss Core Servicesfixed: vendor fix RHSA-2024:1317
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-24-228-06 updated cvss 5.9
Siemens SINEC NMS
-
Siemens SINEC NMS <V3.0affected: fixed in V3.0 support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-23-166-11 updated cvss 5.9
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
-
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem <V1.1affected: fixed in V1.1, workaround support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- last yr.
Exploit prediction
1.31% chance of exploitation in the next 30 days, higher than 71% of all scored CVEs (FIRST EPSS, 2026-11-11).
Exploits and checks
- gitlab.gnome.org https://gitlab.gnome.org/GNOME/libxml2/-/issues/604 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| OSV | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| bitnami | java | <1.8.0 >=1.9.0, <8.0.431 |
1.8.0 8.0.431 |
| bitnami | java-min | <1.8.0 >=1.9.0, <8.0.431 |
1.8.0 8.0.431 |
| bitnami | jre | <1.8.0 >=1.9.0, <8.0.431 |
1.8.0 8.0.431 |
| julia | XML2_jll | <2.12.5+0 |
2.12.5+0 |
Affected products
- Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
- Siemens SINEC NMS
Classification
- Weakness
-
- CWE-416 Use After Free
References
-
gitlab.gnome.org
/GNOME/libxml2/-/issues/604
exploit, issue-tracking, evidence, web
-
gitlab.gnome.org
/GNOME/libxml2/-/tags
release-notes, article, web
-
lists.debian.org
/debian-lts-announce/2025/02/msg00028.html
web
-
security.netapp.com
/advisory/ntap-20241018-0009/
web
- cert-portal.siemens.com /productcert/html/ssa-794697.html
- cert-portal.siemens.com /productcert/html/ssa-784301.html
-
nvd.nist.gov
/vuln/detail/CVE-2024-25062
web
-
openjdk.org
/groups/vulnerability/advisories/2024-10-15
web
-
oracle.com
/security-alerts/cpuoct2024.html
web
Sources
- CVE List CVE-2024-25062
- NVD CVE-2024-25062
- OSV BIT-java-2024-25062
- OSV BIT-java-min-2024-25062
- OSV BIT-jre-2024-25062
- OSV JLSEC-2025-83
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Add additional affected entries per Oracle patch advisories.