CVE-2016-4610

libxslt: Invalid memory access leading to DoS at exsltDynMapFunction()

Published Jul 22, 2016 CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Description
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1860-1 libxslt security update
EUVD EUVD EUVD-2016-5596 libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.0706}

epss

{'score': 0.03258}

Type Values Removed Values Added
Metrics epss

{'score': 0.01471}

epss

{'score': 0.0706}