ByteOS Network

▼CVE Numbering Authority (CNA)

XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
https://support.cybozu.com/ja-jp/article/9735	x_refsource_CONFIRM
https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722	vendor-advisory x_refsource_SLACKWARE
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN17535578/index.html	third-party-advisory x_refsource_JVN
https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory x_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2016/05/25/2	mailing-list x_refsource_MLIST
https://www.debian.org/security/2016/dsa-3593	vendor-advisory x_refsource_DEBIAN
http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html	vendor-advisory x_refsource_APPLE
http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html	vendor-advisory x_refsource_APPLE
http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html	vendor-advisory x_refsource_APPLE
http://xmlsoft.org/news.html	x_refsource_CONFIRM
https://support.apple.com/HT206901	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory x_refsource_UBUNTU
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html	vendor-advisory x_refsource_APPLE
http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000066.html	third-party-advisory x_refsource_JVNDB
http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html	vendor-advisory x_refsource_APPLE
https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
http://www.securityfocus.com/bid/90865	vdb-entry x_refsource_BID
https://git.gnome.org/browse/libxml2/commit/?id=b1d34de46a11323fccffa9fadeb33be670d602f5	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory x_refsource_REDHAT
https://support.apple.com/HT206905	x_refsource_CONFIRM
http://www.securitytracker.com/id/1036348	vdb-entry x_refsource_SECTRACK
https://support.apple.com/HT206903	x_refsource_CONFIRM
https://support.apple.com/HT206902	x_refsource_CONFIRM
https://support.apple.com/HT206904	x_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709	x_refsource_CONFIRM
https://support.apple.com/HT206899	x_refsource_CONFIRM

Hyperlink: http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.cybozu.com/ja-jp/article/9735

Resource:

x_refsource_CONFIRM

Hyperlink: https://kc.mcafee.com/corporate/index?page=content&id=SB10170

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722

Resource:

vendor-advisory

x_refsource_SLACKWARE

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://jvn.jp/en/jp/JVN17535578/index.html

Resource:

third-party-advisory

x_refsource_JVN

Hyperlink: https://access.redhat.com/errata/RHSA-2016:1292

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.openwall.com/lists/oss-security/2016/05/25/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://www.debian.org/security/2016/dsa-3593

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://xmlsoft.org/news.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT206901

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2994-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000066.html

Resource:

third-party-advisory

x_refsource_JVNDB

Hyperlink: http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: https://www.tenable.com/security/tns-2016-18

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/90865

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://git.gnome.org/browse/libxml2/commit/?id=b1d34de46a11323fccffa9fadeb33be670d602f5

Resource:

x_refsource_CONFIRM

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-2957.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://support.apple.com/HT206905

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1036348

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://support.apple.com/HT206903

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT206902

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT206904

Resource:

x_refsource_CONFIRM

Hyperlink: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.apple.com/HT206899

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM x_transferred
https://support.cybozu.com/ja-jp/article/9735	x_refsource_CONFIRM x_transferred
https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM x_transferred
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722	vendor-advisory x_refsource_SLACKWARE x_transferred
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	x_refsource_CONFIRM x_transferred
http://jvn.jp/en/jp/JVN17535578/index.html	third-party-advisory x_refsource_JVN x_transferred
https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory x_refsource_REDHAT x_transferred
http://www.openwall.com/lists/oss-security/2016/05/25/2	mailing-list x_refsource_MLIST x_transferred
https://www.debian.org/security/2016/dsa-3593	vendor-advisory x_refsource_DEBIAN x_transferred
http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html	vendor-advisory x_refsource_APPLE x_transferred
http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html	vendor-advisory x_refsource_APPLE x_transferred
http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
http://xmlsoft.org/news.html	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT206901	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM x_transferred
http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html	vendor-advisory x_refsource_APPLE x_transferred
http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000066.html	third-party-advisory x_refsource_JVNDB x_transferred
http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html	vendor-advisory x_refsource_APPLE x_transferred
https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/90865	vdb-entry x_refsource_BID x_transferred
https://git.gnome.org/browse/libxml2/commit/?id=b1d34de46a11323fccffa9fadeb33be670d602f5	x_refsource_CONFIRM x_transferred
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory x_refsource_REDHAT x_transferred
https://support.apple.com/HT206905	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1036348	vdb-entry x_refsource_SECTRACK x_transferred
https://support.apple.com/HT206903	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT206902	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT206904	x_refsource_CONFIRM x_transferred
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709	x_refsource_CONFIRM x_transferred
https://support.apple.com/HT206899	x_refsource_CONFIRM x_transferred