ISOMAN

CVE

CVE-2016-1834

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.apple.com/archives/security-announce/2016/May/msg00001.html
  2. http://lists.apple.com/archives/security-announce/2016/May/msg00002.html
  3. http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
  4. http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
  5. http://rhn.redhat.com/errata/RHSA-2016-2957.html
  6. http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
  7. http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
  8. http://www.securityfocus.com/bid/90691
  9. http://www.securitytracker.com/id/1035890
  10. http://www.ubuntu.com/usn/USN-2994-1
  11. http://xmlsoft.org/news.html
  12. https://access.redhat.com/errata/RHSA-2016:1292
  13. https://bugzilla.gnome.org/show_bug.cgi?id=763071
  14. https://git.gnome.org/browse/libxml2/commit/?id=8fbbf5513d609c1770b391b99e33314cd0742704
  15. https://kc.mcafee.com/corporate/index?page=content&id=SB10170
  16. https://support.apple.com/HT206564
  17. https://support.apple.com/HT206566
  18. https://support.apple.com/HT206567
  19. https://support.apple.com/HT206568
  20. https://www.debian.org/security/2016/dsa-3593