Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-9714

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:52cc4cf31b2366f3a2047a0a3f04df85b7273d3bf9d3662ecfca3c373c87fe64
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 12 assertions

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1501","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/4

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1400","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/2

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX MX5000RE","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/1

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1511","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/6

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1510","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/5

{"collectionURL":"https://gitlab.gnome.org/GNOME/libxml2","defaultStatus":"unaffected","modules":["xpath"],"packageName":"libxml2","platforms":["Linux"],"product":"libxml2","programFiles":["xpath.c"],"repo":"https://gitlab.gnome.org/GNOME/libxml2","vendor":"libxml2","versions":[{"lessThan":"2.10.0","status":"affected","version":"0","versionType":"semver"},{"lessThan":"2.12.7+dfsg+really2.9.14-0.4ubuntu0.3","status":"affected","version":"0","versionType":"dpkg"},{"lessThan":"2.9.14+dfsg-1.3ubuntu3.5","status":"affected","version":"0","versionType":"dpkg"},{"lessThan":"2.9.13+dfsg-1ubuntu0.9","s…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX5000","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/10

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1512","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/7

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1524","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/8

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1536","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/9

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX MX5000","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/0

{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1500","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/3

Affected products and versions

12 source assertions
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1501","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/4
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1400","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/2
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX MX5000RE","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/1
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1511","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/6
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1510","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/5
{"collectionURL":"https://gitlab.gnome.org/GNOME/libxml2","defaultStatus":"unaffected","modules":["xpath"],"packageName":"libxml2","platforms":["Linux"],"product":"libxml2","programFiles":["xpath.c"],"repo":"https://gitlab.gnome.org/GNOME/libxml2","vendor":"libxml2","versions":[{"lessThan":"2.10.0","status":"affected","version":"0","versionType":"semver"},{"lessThan":"2.12.7+dfsg+really2.9.14-0.4ubuntu0.3","status":"affected","version":"0","versionType":"dpkg"},{"lessThan":"2.9.14+dfsg-1.3ubuntu3.5","status":"affected","version":"0","versionType":"dpkg"},{"lessThan":"2.9.13+dfsg-1ubuntu0.9","s…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX5000","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/10
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1512","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/7
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1524","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/8
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1536","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/9
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX MX5000","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/0
{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1500","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/affected/3

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-674","description":"CWE-674 Uncontrolled Recursion","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-577017.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/2/references/0
{"tags":["patch"],"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/cna/references/0
{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:16bb96dfdf71862d18bd4e760ae24f32937d0890a42ea6d6c16c3dcc4c7ce054 · sha256:382de8c3546c089e… · /containers/adp/1/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer