7.8

CVE-2016-1840

Exploit
Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 8.0
Apple ≫ iPhone OS Version < 9.3.2
Apple ≫ macOS X Version < 10.11.5
Apple ≫ tvOS Version < 9.2.1
Apple ≫ watchOS Version < 2.2.1
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 15.10
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Xmlsoft ≫ Libxml2 Version < 2.9.4
Mcafee ≫ Web Gateway Version >= 7.5.0.0 <= 7.5.2.10
Mcafee ≫ Web Gateway Version >= 7.6.0.0 <= 7.6.2.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.24% 0.867
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://xmlsoft.org/news.html
Vendor Advisory
Release Notes
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2957.html
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
Third Party Advisory
https://security.gentoo.org/glsa/201701-37
Third Party Advisory
https://www.tenable.com/security/tns-2016-18
Third Party Advisory
http://www.ubuntu.com/usn/USN-2994-1
Third Party Advisory
https://www.debian.org/security/2016/dsa-3593
Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1292
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10170
Patch
Third Party Advisory
http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
Vendor Advisory
Mailing List
https://support.apple.com/HT206567
Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/May/msg00002.html
Vendor Advisory
Mailing List
http://www.securitytracker.com/id/1035890
Third Party Advisory
VDB Entry
https://support.apple.com/HT206568
Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/May/msg00001.html
Vendor Advisory
Mailing List
https://support.apple.com/HT206564
Vendor Advisory
http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
Vendor Advisory
Mailing List
https://support.apple.com/HT206566
Vendor Advisory
http://www.securityfocus.com/bid/90691
Third Party Advisory
VDB Entry
https://bugzilla.gnome.org/show_bug.cgi?id=757711
Third Party Advisory
Exploit
Issue Tracking
https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4
Patch
Third Party Advisory