CVE-2017-9049

Name of the Vulnerable Software and Affected Versions libxml2 version 20904-GITv2.9.4-16-g0741801

Description The issue is caused by a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This can cause programs that use libxml2, such as PHP, to crash. The problem exists due to an incomplete fix for a previous bug. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For libxml2 version 20904-GITv2.9.4-16-g0741801, as a temporary workaround, consider disabling the xmlDictComputeFastKey function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.