NVD

Id
19423  
Name
CVE-2016-3627  
Description
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-05-17  
Modified Date
2016-12-27  
Seq
2016-3627  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107002 19423 CVE-2016-3627 openSUSE-SU-2016:1298  View
107003 19423 CVE-2016-3627 openSUSE-SU-2016:1446  View
107004 19423 CVE-2016-3627 20160503 CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser)  View
107005 19423 CVE-2016-3627 [oss-security] 20160321 CVE request: Stack exhaustion in libxml2 parsing xml files in recover mode  View
107006 19423 CVE-2016-3627 [oss-security] 20160321 Re: CVE request: Stack exhaustion in libxml2 parsing xml files in recover mode  View
107007 19423 CVE-2016-3627 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
107008 19423 CVE-2016-3627 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
107009 19423 CVE-2016-3627 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
107010 19423 CVE-2016-3627 84992  View
107011 19423 CVE-2016-3627 USN-2994-1  View
107012 19423 CVE-2016-3627 RHSA-2016:1292  View
107013 19423 CVE-2016-3627 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239  View
107014 19423 CVE-2016-3627 https://kc.mcafee.com/corporate/index?page=content&id=SB10170  View
107015 19423 CVE-2016-3627 DSA-3593  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2004 JVNDB-2016-002777 libxml2 の tree.c の xmlStringGetNodeList 関数におけるサービス運用妨害 (DoS) の脆弱性 libxml2 の tree.c の xmlStringGetNodeList 関数は、リカバリモードで使用される場合、サービス運用妨害 (無限再帰、スタックの消費、およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-3627 90133 CVE-2016-3627 19423 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002777.html 2016-05-13 2016-11-17 View