The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.03334.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected —

Configuration 1 [-]

cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Configuration 3 [-]

OR cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 4 [-]

OR cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:*
cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:*

Configuration 5 [-]

AND
cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Configuration 6 [-]

OR cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Configuration 7 [-]

cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*

Configuration 8 [-]

OR cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 6
libxml2-0:2.7.6-21.el6_8.1 cpe:/o:redhat:enterprise_linux:6 RHSA-2016:1292 2016-06-23T00:00:00Z
Red Hat Enterprise Linux 7
libxml2-0:2.9.1-6.el7_2.3 cpe:/o:redhat:enterprise_linux:7 RHSA-2016:1292 2016-06-23T00:00:00Z
Text-Only JBCS
cpe:/a:redhat:jboss_core_services:1 RHSA-2016:2957 2016-12-15T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Apple Subscribe
Iphone Os Subscribe
Itunes Subscribe
Mac Os X Subscribe
Tvos Subscribe
Watchos Subscribe
Canonical Subscribe
Ubuntu Linux Subscribe
Debian Subscribe
Debian Linux Subscribe
Hp Subscribe
Icewall Federation Agent Subscribe
Mcafee Subscribe
Web Gateway Subscribe
Microsoft Subscribe
Windows Subscribe
Oracle Subscribe
Vm Server Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Jboss Core Services Subscribe
Xmlsoft Subscribe
Libxml2 Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-503-1 libxml2 security update
Debian DSA Debian DSA DSA-3593-1 libxml2 security update
EUVD EUVD EUVD-2016-5436 The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.
Ubuntu USN Ubuntu USN USN-2994-1 libxml2 vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2016-2957.html cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2016/05/25/2 cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html cve-icon cve-icon
http://www.securityfocus.com/bid/90864 cve-icon cve-icon
http://www.securitytracker.com/id/1036348 cve-icon cve-icon
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-2994-1 cve-icon cve-icon
http://xmlsoft.org/news.html cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2016:1292 cve-icon cve-icon
https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83 cve-icon cve-icon
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709 cve-icon cve-icon
https://kc.mcafee.com/corporate/index?page=content&id=SB10170 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2016-4447 cve-icon
https://support.apple.com/HT206899 cve-icon cve-icon
https://support.apple.com/HT206901 cve-icon cve-icon
https://support.apple.com/HT206902 cve-icon cve-icon
https://support.apple.com/HT206903 cve-icon cve-icon
https://support.apple.com/HT206904 cve-icon cve-icon
https://support.apple.com/HT206905 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2016-4447 cve-icon
https://www.debian.org/security/2016/dsa-3593 cve-icon cve-icon
https://www.tenable.com/security/tns-2016-18 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-06T00:32:25.110Z

Reserved: 2016-05-02T00:00:00

Link: CVE-2016-4447

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2016-06-09T16:59:05.707

Modified: 2025-04-12T10:46:40.837

Link: CVE-2016-4447

cve-icon Redhat

Severity : Moderate

Publid Date: 2016-05-23T00:00:00Z

Links: CVE-2016-4447 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses