CVE-2016-1762

libxml2: Heap-based buffer-overread in xmlNextChar

Published Mar 24, 2016 CVSS 3.1 · 8.1 High EPSS 6.1% KEV · Not listed
Description
The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-503-1 libxml2 security update
Debian DSA Debian DSA DSA-3593-1 libxml2 security update
EUVD EUVD EUVD-2016-2857 The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
Ubuntu USN Ubuntu USN USN-2994-1 libxml2 vulnerabilities
History
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Metrics epss

{'score': 0.03094}

epss

{'score': 0.05589}