[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftFNJMPkcXFkym-q8Hsn1U17P53hom6XvXNQFOL18ziI":3,"g5a-risk:CVE-2008-4409":195},{"success":4,"data":5,"meta":193},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":46,"references":47,"referencesCount":149,"weaknesses":150,"weaknessesCount":154,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":155,"seoMetadata":156,"configurations":181,"relatedVendorCves":191,"notableEvents":192},"CVE-2008-4409","What is CVE-2008-4409?","libxml2 2.7.0 and 2.7.1 does not properly handle \"predefined entities definitions\" in entities, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by use of xmllint on a certain XML document, a different vulnerability than CVE-2003-1564 and CVE-2008-3281.","libxml2 2.7.0 and 2.7.1 does not properly handle \"predefined entities definitions\" in entities, which allows context-dependent attackers to cause a denial of...","2008-10-03T17:41:40.57","2026-06-16T22:57:45.703",5,"AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"MEDIUM",10,2.9,false,[],0.08534,[34,34,34,34,34,34,34],"Medium",[38,43],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"xmlsoft","libxml2","2.7.0","cpe:2.3:a:xmlsoft:libxml2:2.7.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"2.7.1","cpe:2.3:a:xmlsoft:libxml2:2.7.1:*:*:*:*:*:*:*",2,[48,53,57,60,64,68,71,74,77,81,84,87,91,95,99,102,106,110,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fbugzilla.gnome.org\u002Fshow_bug.cgi?id=554660","Gnome",[52],"Exploit",{"url":54,"source":55,"tags":56},"http:\u002F\u002Flists.apple.com\u002Farchives\u002Fsecurity-announce\u002F2009\u002FJun\u002Fmsg00005.html","Apple",[],{"url":58,"source":55,"tags":59},"http:\u002F\u002Flists.apple.com\u002Farchives\u002Fsecurity-announce\u002F2009\u002Fjun\u002Fmsg00002.html",[],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fopenwall.com\u002Flists\u002Foss-security\u002F2008\u002F10\u002F02\u002F4","Openwall",[],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F32130","Secunia",[],{"url":69,"source":66,"tags":70},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F32175",[],{"url":72,"source":66,"tags":73},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F32974",[],{"url":75,"source":66,"tags":76},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F35379",[],{"url":78,"source":79,"tags":80},"http:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002Fglsa-200812-06.xml","Gentoo",[],{"url":82,"source":55,"tags":83},"http:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT3613",[],{"url":85,"source":55,"tags":86},"http:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT3639",[],{"url":88,"source":89,"tags":90},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2008:212","Mandriva",[],{"url":92,"source":93,"tags":94},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F31555","Securityfocus",[],{"url":96,"source":97,"tags":98},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F1522","Vupen",[],{"url":100,"source":97,"tags":101},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F1621",[],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F45633","Ibmcloud",[],{"url":107,"source":108,"tags":109},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2008-October\u002Fmsg00125.html","Red Hat",[],{"url":111,"source":108,"tags":112},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2008-October\u002Fmsg00130.html",[],{"url":49,"source":50,"tags":114},[52],{"url":54,"source":55,"tags":116},[],{"url":58,"source":55,"tags":118},[],{"url":61,"source":62,"tags":120},[],{"url":65,"source":66,"tags":122},[],{"url":69,"source":66,"tags":124},[],{"url":72,"source":66,"tags":126},[],{"url":75,"source":66,"tags":128},[],{"url":78,"source":79,"tags":130},[],{"url":82,"source":55,"tags":132},[],{"url":85,"source":55,"tags":134},[],{"url":88,"source":89,"tags":136},[],{"url":92,"source":93,"tags":138},[],{"url":96,"source":97,"tags":140},[],{"url":100,"source":97,"tags":142},[],{"url":103,"source":104,"tags":144},[],{"url":107,"source":108,"tags":146},[],{"url":111,"source":108,"tags":148},[],36,[151],{"id":152,"name":152,"description":153},"Unknown","CWE-399",1,[],{"title":157,"metaDescription":158,"keywords":159,"canonicalUrl":160,"structuredData":161},"What is CVE-2008-4409? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2008-4409, a medium severity cyber security vulnerability from 2008. libxml2 2.7.0 and 2.7.1 does not properly handle \"predefin...","CVE-2008-4409, CVE-2008-4409 vulnerability, CVE-2008-4409 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, xmlsoft security, libxml2 vulnerability","\u002Fwhat-is\u002Fcve-2008-4409",{"@context":162,"@type":163,"headline":157,"description":158,"datePublished":10,"dateModified":11,"author":164,"publisher":168,"about":172,"mainEntityOfPage":176,"articleSection":179,"keywords":180},"https:\u002F\u002Fschema.org","TechArticle",{"@type":165,"name":166,"url":167},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":165,"name":166,"url":167,"logo":169},{"@type":170,"url":171},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":173,"name":6,"description":174,"additionalType":175},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":177,"@id":178},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2008-4409","Cybersecurity","CVE-2008-4409, CVE-2008-4409 vulnerability, CVE-2008-4409 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[182],{"Operator":28,"Negate":28,"Nodes":183},[184],{"Operator":185,"Negate":32,"CPEMatch":186},"OR",[187,189],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":188,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"87E895B9-5AF7-4A1F-B740-B3E13DE3254E",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":190,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8FD29EFD-1ADB-4349-8E7D-EA6B34B0F6DE",[],[],{"lastModified":11,"cacheTime":194,"version":22},1793220061623,{"score":196,"band":36,"action":197,"scoredAt":198},40,"Plan remediation","2026-10-28T06:35:18.998258+00:00"]