Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 13 min 163 bronnen 52 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2016-3627

HIGH · 7.5 CVSS Gepubliceerd: CWE-674

Beschrijving

The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.

Vendors

Opensuse Debian Hp Xmlsoft Canonical Redhat Oracle

Affected products

Leap Debian Linux Icewall Federation Agent Icewall File Manager Libxml2 Ubuntu Linux Jboss Core Services Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Workstation Vm Server Solaris

References