CVE-2016-9596 libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vu...
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat jboss core services | All versions | No fix listed |
| xmlsoft libxml2 | < 2.9.4 | 2.9.4 |
References
- bugzilla.redhat.com issue-tracking
- Debian Security Tracker CVE-2016-9596 vendor-advisory