CVE-2017-10672: Debian Linux

Critical severity, CVSS 9.8. EPSS: 7.9% chance of exploitation in the next 30 days.

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• XML-Libxml Project XML-Libxml: up to and including 2.0129

Published 2017-06-29. Last modified 2026-06-17.