Back to search
CVE-2016-4483
Published: Apr 11, 2017
Modified: Aug 6, 2024
PUBLISHED
Description
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
[oss-security] 20160503 CVE request: out-of-bounds read parsing an XML in libxml2 using recover mode
mailing-list
x_refsource_MLIST
[oss-security] 20160504 Re: CVE request: out-of-bounds read parsing an XML in libxml2 using recover mode
mailing-list
x_refsource_MLIST
[oss-security] 20160607 Re: Please reject duplicate CVE for libxml2
mailing-list
x_refsource_MLIST
90013
vdb-entry
x_refsource_BID
https://www.tenable.com/security/tns-2016-18
x_refsource_CONFIRM
DSA-3593
vendor-advisory
x_refsource_DEBIAN
[oss-security] 20160607 Please reject duplicate CVE for libxml2
mailing-list
x_refsource_MLIST
RHSA-2016:2957
vendor-advisory
x_refsource_REDHAT
GLSA-201701-37
vendor-advisory
x_refsource_GENTOO
1036348
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now