CVE-2017-7375

Name of the Vulnerable Software and Affected Versions: libxml2 (affected versions not specified)

Description: A flaw in libxml2 allows remote XML entity inclusion with default parser flags. This may expose a higher-risk attack surface, allowing access to content from local files, HTTP, or FTP servers. The vulnerability is related to insufficient restriction of XML links to external objects, which can be exploited by a remote attacker to execute arbitrary code or cause a denial of service using a specially crafted file.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.