IM
IronMonkey Threat Research

CVE-2017-7375 CRITICAL

Published: 2018-02-19 | Last Modified: 2026-06-17 | Status: Modified

Description

A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes). Depending on the context, this may expose a higher-risk attack surface in libxml2 not usually reachable with default parser flags, and expose content from local files, HTTP, or FTP servers (which might be otherwise unreachable).

Additional Descriptions (1)

Un error en libxml2 permite la inclusión de entidades XML con marcas de analizador por defecto (por ejemplo, cuando el "caller" no solicitó la sustitución de entidades, validación DTD, carga de subconjuntos DTD externo o los atributos DTD por defecto). Dependiendo del contexto, esto podría exponer una superficie de ataque de mayor riesgo en libxml2 que, normalmente, no sería accesible mediante marcas de analizador por defecto. Además, podría exponer contenido de archivos locales o de servidores HTTP y FTP (que serían inalcanzables de otra forma).

CVSS Metrics

Base Score: 9.8 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Type: Secondary

Exploitability Score: 3.9

Impact Score: 5.9

Base Score: 7.5 (HIGH)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Primary
en CWE-611
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-611

Affected Products

Vendor Product Version Update Type
xmlsoft libxml2 * <built-in method update of dict object at 0x7fd36b262d00> Application
debian debian_linux 7.0 <built-in method update of dict object at 0x7fd3840e7ac0> Operating System
debian debian_linux 8.0 <built-in method update of dict object at 0x7fd340ac8a40> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd3840e5cc0> Operating System
google android 4.4.4 <built-in method update of dict object at 0x7fd36b261ac0> Operating System
google android 5.0.2 <built-in method update of dict object at 0x7fd36b262f80> Operating System
google android 5.1.1 <built-in method update of dict object at 0x7fd36b262d40> Operating System
google android 6.0 <built-in method update of dict object at 0x7fd3840e7b40> Operating System
google android 6.0.1 <built-in method update of dict object at 0x7fd3840e66c0> Operating System
google android 7.0 <built-in method update of dict object at 0x7fd36b263740> Operating System
google android 7.1.1 <built-in method update of dict object at 0x7fd340ac84c0> Operating System
google android 7.1.2 <built-in method update of dict object at 0x7fd3840e6bc0> Operating System
xmlsoft libxml2 2.9.4 <built-in method update of dict object at 0x7fd340ac8500> Application
xmlsoft libxml2 2.9.4 <built-in method update of dict object at 0x7fd2db3f2cc0> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*
Yes cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:xmlsoft:libxml2:2.9.4:rc1:*:*:*:*:*:*
Yes cpe:2.3:a:xmlsoft:libxml2:2.9.4:rc2:*:*:*:*:*:*

References