CVE-2016-1835

Published: May 20, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.

Affected (7)

Products: Canonical: Ubuntu Linux · Apple: Iphone Os, Mac Os X · Debian: Debian Linux

1 product

2 products

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 9.3.1
Apple Mac Os X	Up to 10.11.4

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (36)

http://lists.apple.com/archives/security-announce/2016/May/msg00002.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2016/May/msg00004.html

Source: product-security@apple.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-2957.html

Source: product-security@apple.com

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Source: product-security@apple.com

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: product-security@apple.com

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: product-security@apple.com

http://www.securityfocus.com/bid/90696

Source: product-security@apple.com

http://www.securitytracker.com/id/1035890

Source: product-security@apple.com

http://www.ubuntu.com/usn/USN-2994-1

Source: product-security@apple.com

http://xmlsoft.org/news.html

Source: product-security@apple.com

https://access.redhat.com/errata/RHSA-2016:1292

Source: product-security@apple.com

https://bugzilla.gnome.org/show_bug.cgi?id=759020

Source: product-security@apple.com

https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb

Source: product-security@apple.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10170

Source: product-security@apple.com

https://support.apple.com/HT206567

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT206568

Source: product-security@apple.com

Vendor Advisory

https://www.debian.org/security/2016/dsa-3593

Source: product-security@apple.com

https://www.tenable.com/security/tns-2016-18

Source: product-security@apple.com

http://lists.apple.com/archives/security-announce/2016/May/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.apple.com/archives/security-announce/2016/May/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-2957.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/90696

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1035890

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2994-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://xmlsoft.org/news.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2016:1292

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.gnome.org/show_bug.cgi?id=759020

Source: af854a3a-2127-422b-91ae-364da2661108

https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb

Source: af854a3a-2127-422b-91ae-364da2661108

https://kc.mcafee.com/corporate/index?page=content&id=SB10170

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT206567

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT206568

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.debian.org/security/2016/dsa-3593

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.tenable.com/security/tns-2016-18

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.