Medium severity6.5NVD Advisory· Published Apr 24, 2023· Updated Jun 17, 2026

CVE-2023-29469

Description

An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xmlsoft/Libxml2
cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*
Range: <2.10.4
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
libxml2/libxml2description
GNOME Foundation/Libxml2llm-fuzzy
Range: <2.10.4
osv-coords55 versions
pkg:rpm/almalinux/libxml2 pkg:rpm/almalinux/libxml2-devel pkg:rpm/almalinux/python3-libxml2 pkg:rpm/opensuse/libxml2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/libxml2&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/libxml2&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/libxml2-python&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/libxml2-python&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/python-libxml2-python&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/ruby3.2-rubygem-nokogiri&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/rubygem-nokogiri&distro=openSUSE%20Tumbleweed pkg:rpm/suse/libxml2&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/libxml2&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/libxml2&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/libxml2&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/python-libxml2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/python-libxml2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/python-libxml2-python&distro=SUSE%20Manager%20Server%204.2
< 2.9.13-3.el9_2.1+ 54 more
- (no CPE)range: < 2.9.13-3.el9_2.1
- (no CPE)range: < 2.9.13-3.el9_2.1
- (no CPE)range: < 2.9.13-3.el9_2.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.10.4-1.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 1.15.4-1.1
- (no CPE)range: < 1.15.5-1.5
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.4-46.62.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.4-46.62.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.4-46.62.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.9.14-150400.5.16.1
- (no CPE)range: < 2.9.4-46.62.1
- (no CPE)range: < 2.9.4-46.62.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1
- (no CPE)range: < 2.9.7-150000.3.57.1

Patches

Vulnerability mechanics

References

gitlab.gnome.org/GNOME/libxml2/-/issues/510nvdIssue TrackingVendor Advisory
lists.debian.org/debian-lts-announce/2023/04/msg00031.htmlnvdMailing ListThird Party Advisory
gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4nvdRelease Notes
security.netapp.com/advisory/ntap-20230601-0006/nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000