A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that "[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all."

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20631-1 advisory.

    Changes in libxml2:

    - CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in       `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811).
    - CVE-2026-0992: excessive resource consumption when processing XML catalogs due to exponential behavior     when handling       `nextCatalog` elements (bsc#1256809, bsc#1256812).
    - CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog     files       (bsc#1247858).
    - CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257594, bsc#1257595).
    - CVE-2025-10911: parsing xsl nodes may lead to use-after-free with key data stored cross-RVT     (bsc#1250553)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20312-1 advisory.

    Changes in libxml2:

    - CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in       `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811).
    - CVE-2026-0992: excessive resource consumption when processing XML catalogs due to exponential behavior     when handling       `nextCatalog` elements (bsc#1256809, bsc#1256812).
    - CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog     files       (bsc#1247858).
    - CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257594, bsc#1257595).
    - CVE-2025-10911: parsing xsl nodes may lead to use-after-free with key data stored cross-RVT     (bsc#1250553)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0605-1 advisory.

    - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in     `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811)
    - CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential     behavior. (bsc#1256809, bsc#1256812)
    - CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595)
    - CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553)
    - CVE-2025-8732: Fixed an infinite recursion in catalog parsing functions when processing malformed SGML     catalog files. (bsc#1247858)
    - CVE-2026-0989: Fixe a call stack exhaustion leading to application crash due to RelaxNG parser not     limiting the recursion depth. (bsc#1256805, bsc#1256810)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57292. It is, therefore, affected by a vulnerability as referenced in the IJ57292 advisory.

  - A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57276. It is, therefore, affected by a vulnerability as referenced in the IJ57276 advisory.

  - A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57291. It is, therefore, affected by a vulnerability as referenced in the IJ57291 advisory.

  - A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57282. It is, therefore, affected by a vulnerability as referenced in the IJ57282 advisory.

  - A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0570-1 advisory.

    - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in     `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811)
    - CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential     behavior. (bsc#1256809, bsc#1256812)
    - CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595)
    - CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553)
    - CVE-2025-8732: Fixed an infinite recursion in catalog parsing functions when processing malformed SGML     catalog files. (bsc#1247858)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7974-1 advisory.

    It was discovered that libxml2 incorrectly handled maliciously crafted SGML catalog files. An attacker     could possibly use this issue to cause libxml2 to consume excessive resources, leading to a denial of     service. (CVE-2025-8732)

    It was discovered that libxml2 incorrectly handled recursive include directories with the RelaxNG parser.
    An attacker could possibly use this issue to cause libxml2 to consume excessive resources, leading to a     denial of service. (CVE-2026-0989)

    Nick Wellnhofer discovered that libxml2 incorrectly parsed catalogs with self-referencing URI delegates.
    An attacker could possibly use this issue to cause libxml2 to consume excessive resources, leading to a     denial of service. (CVE-2026-0990)

    Nick Wellnhofer discovered that libxml2 inefficiently parsed catalogs linked with repeating nextCatalog     elements. An attacker could possibly use this issue to cause libxml2 to use excessive resources, leading     to a denial of service. (CVE-2026-0992)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1360 advisory.

    A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3122 advisory.

    A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Java installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory.
  - Vulnerability in Oracle Java SE (component: JavaFX (libxslt)). Supported versions that are affected are     Oracle Java SE: 8u471-b50. Difficult to exploit vulnerability allows unauthenticated attacker with network     access via multiple protocols to compromise Oracle Java SE. Successful attacks require human interaction     from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of     Oracle Java SE. (CVE-2025-7425)

  - Vulnerability in Oracle Java SE (component: JavaFX (WebKitGTK)). Supported versions that are affected are     Oracle Java SE: 8u471-b50. Difficult to exploit vulnerability allows unauthenticated attacker with network     access via multiple protocols to compromise Oracle Java SE. Successful attacks require human interaction     from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of     Oracle Java SE. (CVE-2025-43368)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471,     8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle     GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a     hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition. (CVE-2026-21945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4115-1 advisory.

    - CVE-2025-9714: Fixed inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c     (bsc#1249076)
    - CVE-2025-8732: Fixed infinite recursion in catalog parsing functions when processing malformed SGML     catalog files (bsc#1247850)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4104-1 advisory.

    - CVE-2025-9714: Fixed infinite recursion at exsltDynMapFunction function in libexslt/dynamic.c     (bsc#1249076)
    - CVE-2025-8732: Fixed infinite recursion in catalog parsing functions when processing malformed SGML     catalog files (bsc#1247850)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability     affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to     uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public     and may be used. The real existence of this vulnerability is still doubted at the moment. The code     maintainer explains, that [t]he issue can only be triggered with untrusted SGML catalogs and it makes     absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at     all. (CVE-2025-8732)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
301455	SUSE SLES16 Security Update : libxml2, libxslt (SUSE-SU-2026:20631-1)	Nessus	SuSE Local Security Checks	medium
301309	openSUSE 16 Security Update : libxml2, libxslt (openSUSE-SU-2026:20312-1)	Nessus	SuSE Local Security Checks	medium
300043	SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2026:0605-1)	Nessus	SuSE Local Security Checks	medium
299611	AIX (IJ57292)	Nessus	AIX Local Security Checks	medium
299610	AIX (IJ57276)	Nessus	AIX Local Security Checks	medium
299609	AIX (IJ57291)	Nessus	AIX Local Security Checks	medium
299608	AIX (IJ57282)	Nessus	AIX Local Security Checks	medium
299578	openSUSE 15 Security Update : libxml2 (SUSE-SU-2026:0570-1)	Nessus	SuSE Local Security Checks	medium
296249	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : libxml2 vulnerabilities (USN-7974-1)	Nessus	Ubuntu Local Security Checks	medium
296230	Amazon Linux 2023 : libxml2, libxml2-devel, libxml2-static (ALAS2023-2026-1360)	Nessus	Amazon Linux Local Security Checks	medium
294888	Amazon Linux 2 : libxml2, --advisory ALAS2-2026-3122 (ALAS-2026-3122)	Nessus	Amazon Linux Local Security Checks	medium
294870	Oracle Java SE Multiple Vulnerabilities (January 2026 CPU)	Nessus	Misc.	medium
275597	openSUSE 15 Security Update : libxml2 (SUSE-SU-2025:4115-1)	Nessus	SuSE Local Security Checks	medium
275505	SUSE SLES12 Security Update : libxml2 (SUSE-SU-2025:4104-1)	Nessus	SuSE Local Security Checks	medium
253547	Linux Distros Unpatched Vulnerability : CVE-2025-8732	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-8732

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium