CVE-2008-4409

libxml2 2.7.0 and 2.7.1 - Denial of Service via Predefined Entities Handling

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4409. PoCs published by Christian Weiske.

AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in libxml2 by using a malformed XML file with recursive entity definitions, causing excessive memory consumption.

Description

libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by use of xmllint on a certain XML document, a different vulnerability than CVE-2003-1564 and CVE-2008-3281.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Christian Weiske · xmldosunix

https://www.exploit-db.com/exploits/32454

View Code ZIP pw:eip

This exploit demonstrates a denial-of-service vulnerability in libxml2 by using a malformed XML file with recursive entity definitions, causing excessive memory consumption.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: libxml2 versions prior to 2.7.2

No auth needed

Prerequisites: A vulnerable version of libxml2 (2.7 prior to 2.7.2) · Ability to deliver the malicious XML file to the target system

MITRE ATT&CK

T1499 - Endpoint Denial of Service

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (18)

Core 18

Core References

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT3639

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

Vendor Advisory vendor-advisory x_refsource_fedora

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00125.html

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2008:212

Vendor Advisory vendor-advisory x_refsource_fedora

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00130.html

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT3613

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/1621

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/1522

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200812-06.xml

Mailing List mailing-list x_refsource_mlist

http://openwall.com/lists/oss-security/2008/10/02/4

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32130

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/35379

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/31555

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32974

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32175

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/45633

Exploit x_refsource_confirm

http://bugzilla.gnome.org/show_bug.cgi?id=554660

Scores

EPSS 0.0853

EPSS Percentile 94.4%

Details

CWE

CWE-399

Status published

Products (2)

xmlsoft/libxml2 2.7.0

xmlsoft/libxml2 2.7.1

Published Oct 03, 2008

Tracked Since Feb 18, 2026