CVE-2016-9598 libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document. NOTE: this vulne...
MediumCVSS 6.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document. NOTE: this vulnerability exists because of a missing fix for CVE-2016-4483.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat jboss core services | All versions | No fix listed |
| xmlsoft libxml2 | < 2.9.4 | 2.9.4 |
References
- RHSA-2018:2486 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- Debian Security Tracker CVE-2016-9598 vendor-advisory