CVE-2016-4447
09.06.2016, 16:59
The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.Enginsight
| Vendor | Product | Version |
|---|---|---|
| hp | icewall_federation_agent | 3.0 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 15.10 |
| canonical | ubuntu_linux | 16.04 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| oracle | vm_server | 3.3 |
| oracle | vm_server | 3.4 |
| apple | itunes | 12.4.1 |
| apple | iphone_os | 𝑥 ≤ 9.3.2 |
| apple | mac_os_x | 𝑥 ≤ 10.11.5 |
| apple | tvos | 𝑥 ≤ 9.2.1 |
| apple | watchos | 𝑥 ≤ 2.2.1 |
| xmlsoft | libxml2 | 𝑥 ≤ 2.9.3 |
| mcafee | web_gateway | 7.5.0.0 ≤ 𝑥 ≤ 7.5.2.10 |
| mcafee | web_gateway | 7.6.0.0 ≤ 𝑥 ≤ 7.6.2.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration