9.8crit
CVE-2017-7375
A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution,…
Published 8 y ago · modified 24 d ago · JSON
CVSS
9.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
3.0%
percentile 87%
Public exploits
0
none known
Summary
A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes). Depending on the context, this may expose a higher-risk attack surface in libxml2 not usually reachable with default parser flags, and expose content from local files, HTTP, or FTP servers (which might be otherwise unreachable).
CISA SSVC assessment
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 11 mo ago
Exploit prediction (EPSS)
2.98% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
- Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Classification
- Weakness
- CWE-611 Improper Restriction of XML External Entity Reference
References
- android.googlesource.com /platform/external/libxml2/+/308396a55280f69ad4112d4f9892f4cbeff042aa · x_refsource_CONFIRM, x_transferred
- source.android.com /security/bulletin/2017-06-01 · x_refsource_CONFIRM, x_transferred
- debian.org /security/2017/dsa-3952 · vendor-advisory, x_refsource_DEBIAN, x_transferred
- securityfocus.com /bid/98877 · vdb-entry, x_refsource_BID, x_transferred
- security.gentoo.org /glsa/201711-01 · vendor-advisory, x_refsource_GENTOO, x_transferred
- git.gnome.org /browse/libxml2/commit/?id=90ccb58242866b0ba3edbef8fe44214a101c2b3e · x_refsource_CONFIRM, x_transferred
- bugzilla.redhat.com /show_bug.cgi?id=1462203 · x_refsource_CONFIRM, x_transferred
- securitytracker.com /id/1038623 · vdb-entry, x_refsource_SECTRACK, x_transferred
- cert-portal.siemens.com /productcert/html/ssa-398330.html
Sources
- CVE List: CVE-2017-7375
- NVD: CVE-2017-7375
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.