CVE-2007-6284: Debian Linux

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.

Affected products

• Debian Debian Linux: version 3.1 only; version 4.0 only
• Mandrakesoft Mandrake Linux: version 2007 only; version 2007.1 only; version 2008.0 only
• Mandrakesoft Mandrake Linux Corporate Server: version 3.0 only; version 4.0 only
• Red Hat Fedora: version 7 only; version 8 only

Published 2008-01-12. Last modified 2026-06-16.