PT-2016-3271 · Xmlsoft+5 · Libxml2+5

Andrej Nemec · Published 2016-03-12 · Updated 2023-02-12 · CVE-2016-4448

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.4

Description The issue is related to a format string vulnerability in the libxml2 library. This vulnerability may allow attackers to have an unspecified impact through format string specifiers in unknown vectors. The vulnerability is associated with the use of an uncontrolled format string in the LIBXML ATTR FORMAT function of the libxml2 library. Exploitation of the vulnerability could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For versions prior to 2.9.4, update to version 2.9.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the LIBXML ATTR FORMAT function until a patch is available.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

ALT-PU-2016-1221

BDU:2018-01273

CESA-2016_1292

CVE-2016-4448

MGASA-2016-0263

OPENSUSE-SU-2016_1595-1

RHSA-2016:1292

RHSA-2016_1292

SUSE-SU-2016:1538-1

SUSE-SU-2016:1604-1

SUSE-SU-2017:2699-1

SUSE-SU-2017:2700-1

USN-3235-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Libxml2

References · 79

• https://ubuntu.com/security/CVE-2016-4658 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4448 · Vendor Advisory
• https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4448 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1538-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0263.html · Security Note
• https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b · Vendor Advisory
• https://osv.dev/vulnerability/USN-3235-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-4448 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4448 · Security Note
• http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-4448 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-4448 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3235-1 · Vendor Advisory