CVE-2016-3705

Published: May 17, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references.

Affected (9)

Products: Canonical: Ubuntu Linux · Xmlsoft: Libxml2 · Debian: Debian Linux · +2 more

Show all products

Canonical: Ubuntu Linux · Xmlsoft: Libxml2 · Debian: Debian Linux · Hp: Icewall Federation Agent, Icewall File Manager · Opensuse: Leap

1 product

1 product

1 product

2 products

Icewall Federation Agent

Icewall File Manager

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.10
Canonical Ubuntu Linux	Version 16.04

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxml2	Version 2.9.3

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Hp Icewall Federation Agent	Version 3.0
Hp Icewall File Manager	Version 3.0

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (32)

http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-2957.html

Source: secalert@redhat.com

http://seclists.org/fulldisclosure/2016/May/10

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/89854

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2994-1

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2016:1292

Source: secalert@redhat.com

https://bugzilla.gnome.org/show_bug.cgi?id=765207

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239

Source: secalert@redhat.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10170

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201701-37

Source: secalert@redhat.com

https://www.debian.org/security/2016/dsa-3593

Source: secalert@redhat.com

https://www.tenable.com/security/tns-2016-18

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-2957.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2016/May/10

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/89854

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2994-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2016:1292

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.gnome.org/show_bug.cgi?id=765207

Source: af854a3a-2127-422b-91ae-364da2661108

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239

Source: af854a3a-2127-422b-91ae-364da2661108

https://kc.mcafee.com/corporate/index?page=content&id=SB10170

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201701-37

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2016/dsa-3593

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.tenable.com/security/tns-2016-18

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.