CVE-2020-7595: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 7.8% chance of exploitation in the next 30 days.

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 18.04 only; version 19.10 only
• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 30 only; version 31 only; version 32 only
• Netapp Clustered Data Ontap: affected versions not specified
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Smi-S Provider: affected versions not specified
• Netapp Snapdrive: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified
• Netapp Symantec Netbackup: affected versions not specified
• Oracle Communications Cloud Native Core Network Function Cloud Native Environment: version 1.10.0 only
• Oracle Enterprise Manager Base Platform: version 13.4.0.0 only; version 13.5.0.0 only
• Oracle Enterprise Manager Ops Center: version 12.4.0.0 only
• Oracle MySQL Workbench: up to and including 8.0.26
• Oracle PeopleSoft Enterprise PeopleTools: version 8.58 only
• Oracle Real User Experience Insight: version 13.3.1.0 only; version 13.4.1.0 only; version 13.5.1.0 only
• Siemens Sinema Remote Connect Server: before 3.0 (fixed in 3.0)
• Xmlsoft LIBXML2: version 2.9.10 only

Published 2020-01-21. Last modified 2026-06-17.