← Back

CVE-2016-4448

nvd nist
Published: Jun 9, 2016Modified: May 6, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.

Affected (38)

Show all products
Hp: Icewall Federation Agent · Apple: Watchos, Mac Os X, Icloud, Iphone Os, Itunes, Tvos · Xmlsoft: Libxml2 · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Slackware: Slackware Linux · Oracle: Vm Server, Linux · Tenable: Log Correlation Engine · Mcafee: Web Gateway
Hp
1 product
Icewall Federation Agent
Apple
6 products
Watchos
Mac Os X
Icloud
Iphone Os
Itunes
Tvos
Xmlsoft
1 product
Libxml2
Redhat
6 products
Enterprise Linux Desktop
Enterprise Linux Server
Enterprise Linux Server Aus
Enterprise Linux Server Eus
Enterprise Linux Server Tus
Enterprise Linux Workstation
Slackware
1 product
Slackware Linux
Oracle
2 products
Vm Server
Linux
Tenable
1 product
Log Correlation Engine
Mcafee
1 product
Web Gateway
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Icewall Federation Agent
Version 3.0
Running on/withPlatform Versions
Redhat
Enterprise Linux
Version 6.0
Redhat
Enterprise Linux
Version 7.0
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Watchos
Up to 2.2.1
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Mac Os X
Before 10.11.6
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Libxml2
Up to 2.9.3
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Icloud
Before 5.2.1
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration F
1 vulnerable
Vulnerable SoftwareAffected Versions
Iphone Os
Up to 9.3.2
Configuration G
21 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux Desktop
Version 6.0
Enterprise Linux Desktop
Version 7.0
Redhat
Enterprise Linux Server
Version 6.0
Enterprise Linux Server
Version 7.0
Redhat
Enterprise Linux Server Aus
Version 7.2
Enterprise Linux Server Aus
Version 7.3
Enterprise Linux Server Aus
Version 7.4
Enterprise Linux Server Aus
Version 7.6
Enterprise Linux Server Aus
Version 7.7
Redhat
Enterprise Linux Server Eus
Version 7.2
Enterprise Linux Server Eus
Version 7.3
Enterprise Linux Server Eus
Version 7.4
Enterprise Linux Server Eus
Version 7.5
Enterprise Linux Server Eus
Version 7.6
Enterprise Linux Server Eus
Version 7.7
Redhat
Enterprise Linux Server Tus
Version 7.2
Enterprise Linux Server Tus
Version 7.3
Enterprise Linux Server Tus
Version 7.6
Enterprise Linux Server Tus
Version 7.7
Redhat
Enterprise Linux Workstation
Version 6.0
Enterprise Linux Workstation
Version 7.0
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Itunes
Up to 12.4.1
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration I
2 vulnerable
Vulnerable SoftwareAffected Versions
Slackware
Slackware Linux
Version 14.0
Slackware Linux
Version 14.1
Configuration J
2 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Vm Server
Version 3.3
Vm Server
Version 3.4
Configuration K
1 vulnerable
Vulnerable SoftwareAffected Versions
Tvos
Up to 9.2.1
Configuration L
1 vulnerable
Vulnerable SoftwareAffected Versions
Log Correlation Engine
Version 4.8.0
Configuration M
2 vulnerable
Vulnerable SoftwareAffected Versions
Mcafee
Web Gateway
Up to 7.5.2.10
Web Gateway
From 7.6.0.0 to 7.6.2.3
Configuration N
2 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Linux
Version 6
Linux
Version 7 0

Related CWEs

CWE-134
Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (54)

Source: secalert@redhat.com
Mailing ListRelease Notes
Source: secalert@redhat.com
Mailing ListRelease Notes
Source: secalert@redhat.com
Mailing ListRelease Notes
Source: secalert@redhat.com
Mailing ListRelease Notes
Source: secalert@redhat.com
Mailing ListRelease Notes
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Third Party AdvisoryVDB Entry
Source: secalert@redhat.com
Third Party AdvisoryVDB Entry
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Release Notes
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue TrackingThird Party Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Release Notes
Source: secalert@redhat.com
Release Notes
Source: secalert@redhat.com
Release Notes
Source: secalert@redhat.com
Release Notes
Source: secalert@redhat.com
Release Notes
Source: secalert@redhat.com
Release Notes
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListRelease Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListRelease Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListRelease Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListRelease Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListRelease Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.