CVE-2017-5969

Name of the Vulnerable Software and Affected Versions libxml2 version 2.9.4

Description The issue is related to a denial of service caused by a NULL pointer dereference when libxml2 is used in recover mode. This can be triggered by a remote attacker via a crafted XML document. The maintainer of libxml2 has stated that the Recover parsing option should only be used for manual recovery, at least for the XML parser.

Recommendations For libxml2 version 2.9.4, consider disabling the recover mode to prevent exploitation until a patch is available. As a temporary workaround, avoid using the recover parsing option for automatic processing of XML documents.