CVE-2017-16931Published
parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2017-16931 · Microsoft / collected KEV context
cve-program · CVE-2017-16931
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.