Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9597

Опубликовано: 03 мая 2016
Источник: redhat
CVSS2: 4.3
EPSS Низкий

Описание

It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libxml2Not affected
Red Hat Enterprise Linux 6libxml2Not affected
Red Hat Enterprise Linux 7libxml2Not affected
Red Hat JBoss Core ServiceshttpdAffected
Text-Only JBCSFixedRHSA-2018:248616.08.2018

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-674
https://bugzilla.redhat.com/show_bug.cgi?id=1408305libxml2: stack overflow before detecting invalid XML file (unfixed CVE-2016-3705 in JBCS)

EPSS

Процентиль: 91%
0.04484
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 8 лет назад

It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.

CVSS3: 7.5
nvd
около 8 лет назад

It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.

CVSS3: 7.5
debian
около 8 лет назад

It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 f ...

CVSS3: 7.5
github
больше 4 лет назад

It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.

suse-cvrf
больше 9 лет назад

Security update for libxml2

EPSS

Процентиль: 91%
0.04484
Низкий

4.3 Medium

CVSS2