CVE-2020-7595
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Published Jan 21, 2020 · updated Oct 14, 2026 · xmlsoft libxml2
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Timeline
Detection, updates, and resolution for this record.
Jan 21, 2020 · NIST NVD
Detected
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Oct 14, 2026 · NIST NVD
Updated
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
Affected
- cpe canonical/ubuntu linux12.04
- cpe canonical/ubuntu linux14.04
- cpe canonical/ubuntu linux16.04
- cpe canonical/ubuntu linux18.04
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora30
- cpe fedoraproject/fedora31
- cpe fedoraproject/fedora32
- cpe netapp/clustered data ontapversion unspecified
- cpe netapp/h300s firmwareversion unspecified
- cpe siemens/sinema remote connect serverversion unspecified
- cpe xmlsoft/libxml22.9.10
Sources
- CVE.orgCVE-2020-7595
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-7595
30-day exploitation probability 7.8%
first.org - NIST NVDCVE-2020-7595
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
nvd.nist.gov