CVE-2016-5131

Published: Jul 23, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.

Affected (17)

Products: Google: Chrome · Xmlsoft: Libxml2 · Apple: Iphone Os, Mac Os X, Tvos, Watchos · +5 more

Show all products

Google: Chrome · Xmlsoft: Libxml2 · Apple: Iphone Os, Mac Os X, Tvos, Watchos · Canonical: Ubuntu Linux · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation · Opensuse: Leap, Opensuse · Suse: Linux Enterprise · Debian: Debian Linux

1 product

1 product

4 products

1 product

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

2 products

1 product

Linux Enterprise

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 52.0.2743.82

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxml2	Up to 2.9.4

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 10.0
Apple Mac Os X	Before 10.12
Apple Tvos	Before 10.0
Apple Watchos	Before 3.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Workstation	Version 6.0

Configuration F

4 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise	Version 12.0

Configuration G

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (50)

http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html

Source: chrome-cve-admin@google.com

http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html

Source: chrome-cve-admin@google.com

http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html

Source: chrome-cve-admin@google.com

http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html

Source: chrome-cve-admin@google.com

http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2016-1485.html

Source: chrome-cve-admin@google.com

http://www.debian.org/security/2016/dsa-3637

Source: chrome-cve-admin@google.com

http://www.securityfocus.com/bid/92053

Source: chrome-cve-admin@google.com

http://www.securitytracker.com/id/1036428

Source: chrome-cve-admin@google.com

http://www.securitytracker.com/id/1038623

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-3041-1

Source: chrome-cve-admin@google.com

https://bugzilla.redhat.com/show_bug.cgi?id=1358641

Source: chrome-cve-admin@google.com

https://codereview.chromium.org/2127493002

Source: chrome-cve-admin@google.com

https://crbug.com/623378

Source: chrome-cve-admin@google.com

https://security.gentoo.org/glsa/201610-09

Source: chrome-cve-admin@google.com

https://security.gentoo.org/glsa/201701-37

Source: chrome-cve-admin@google.com

https://source.android.com/security/bulletin/2017-05-01

Source: chrome-cve-admin@google.com

https://support.apple.com/HT207141

Source: chrome-cve-admin@google.com

https://support.apple.com/HT207142

Source: chrome-cve-admin@google.com

https://support.apple.com/HT207143

Source: chrome-cve-admin@google.com

https://support.apple.com/HT207170

Source: chrome-cve-admin@google.com

http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2016-1485.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2016/dsa-3637

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/92053

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1036428

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1038623

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-3041-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1358641

Source: af854a3a-2127-422b-91ae-364da2661108

https://codereview.chromium.org/2127493002

Source: af854a3a-2127-422b-91ae-364da2661108

https://crbug.com/623378

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201610-09

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201701-37

Source: af854a3a-2127-422b-91ae-364da2661108

https://source.android.com/security/bulletin/2017-05-01

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT207141

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT207142

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT207143

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT207170

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.