CVE-2016-1833

Published: 20 May 2016

The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

Priority

Cvss 3 Severity Score

5.5

Score breakdown

Status

Package	Release	Status
libxml2 Launchpad, Ubuntu, Debian	precise	Released (2.7.8.dfsg-5.1ubuntu4.15)
	trusty	Released (2.9.1+dfsg1-3ubuntu4.8)
	upstream	Released (2.9.4)
	wily	Released (2.9.2+zdfsg1-4ubuntu0.4)
	xenial	Released (2.9.3+dfsg1-1ubuntu0.1)
	yakkety	Not vulnerable (2.9.3+dfsg1-1.2)
	zesty	Not vulnerable (2.9.3+dfsg1-1.2)
	Patches: upstream: https://git.gnome.org/browse/libxml2/commit/?id=ff76eb28c75451bc56e3b93f44dac155ca29e7f5 upstream: https://git.gnome.org/browse/libxml2/commit/?id=fdfeecc1b73b0318466f0d61f0b8881ed9d92dd2 upstream: https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76

Severity score breakdown

Parameter	Value
Base score	5.5
Attack vector	Local
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

Bugs

https://bugzilla.gnome.org/show_bug.cgi?id=758606

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›