DeutschShown in its original language — a full translation is planned for a future version.
libxml2: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit den Rechten des Dienstes
view advisory published 2016-06-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libxml2 ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder um einen Denial of Service Zustand herbeizuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-1840US | high7.8 | — | ||
Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS be… | ||||
| CVE-2016-1839US | medium5.5 | Exploit | ||
The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers… | ||||
| CVE-2016-1838US | medium5.5 | Exploit | ||
The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows… | ||||
| CVE-2016-1837US | medium5.5 | — | ||
Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X be… | ||||
| CVE-2016-1835US | high8.8 | — | ||
Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause… | ||||
| CVE-2016-1834US | high7.8 | — | ||
Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1,… | ||||
| CVE-2016-1833US | medium5.5 | — | ||
The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers t… | ||||
02
references
External citations — patches, advisories, analysis.
- Juniper Security Advisory JSA11023 vom 2020-07-08external
- Juniper Security Advisory JSA10770 vom 2017-01-12external
- Red Hat Security Advisory RHSA-2016:1292 vom 2016-06-24external
- Oracle Linux Security Advisory ELSA-2025-2673 vom 2025-03-21external
- SUSE Security Update SUSE-SU-2016:1538-1 vom 2016-06-09external
- F5 Security Advisory K16712298 vom 2016-12-20external
- F5 Security Advisory K26422113 vom 2016-12-06external
- F5 Security Advisory K71926235 vom 2016-12-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan