NVD

Id
20099  
Name
CVE-2016-4449  
Description
XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-06-09  
Modified Date
2016-12-27  
Seq
2016-4449  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
109654 20099 CVE-2016-4449 APPLE-SA-2016-07-18-1  View
109655 20099 CVE-2016-4449 APPLE-SA-2016-07-18-2  View
109656 20099 CVE-2016-4449 APPLE-SA-2016-07-18-3  View
109657 20099 CVE-2016-4449 APPLE-SA-2016-07-18-4  View
109658 20099 CVE-2016-4449 APPLE-SA-2016-07-18-6  View
109659 20099 CVE-2016-4449 [oss-security] 20160525 3 libxml2 issues  View
109660 20099 CVE-2016-4449 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
109661 20099 CVE-2016-4449 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
109662 20099 CVE-2016-4449 90865  View
109663 20099 CVE-2016-4449 SSA:2016-148-01  View
109664 20099 CVE-2016-4449 USN-2994-1  View
109665 20099 CVE-2016-4449 http://xmlsoft.org/news.html  View
109666 20099 CVE-2016-4449 RHSA-2016:1292  View
109667 20099 CVE-2016-4449 https://git.gnome.org/browse/libxml2/commit/?id=b1d34de46a11323fccffa9fadeb33be670d602f5  View
109668 20099 CVE-2016-4449 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709  View
109669 20099 CVE-2016-4449 https://kc.mcafee.com/corporate/index?page=content&id=SB10170  View
109670 20099 CVE-2016-4449 https://support.apple.com/HT206899  View
109671 20099 CVE-2016-4449 https://support.apple.com/HT206901  View
109672 20099 CVE-2016-4449 https://support.apple.com/HT206902  View
109673 20099 CVE-2016-4449 https://support.apple.com/HT206903  View
109674 20099 CVE-2016-4449 https://support.apple.com/HT206904  View
109675 20099 CVE-2016-4449 https://support.apple.com/HT206905  View
109676 20099 CVE-2016-4449 DSA-3593  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2330 JVNDB-2016-003103 libxml2 の parser.c の xmlStringLenDecodeEntities 関数における XML 外部エンティティの脆弱性 libxml2 の parser.c の xmlStringLenDecodeEntities 関数には、XML 外部エンティティの脆弱性が存在します。 CVE-2016-4449 90955 CVE-2016-4449 20099 5.8 7.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003103.html 2016-05-23 2016-11-16 View
65628 JVNDB-2017-000066 サイボウズ Office のAPI に関するサービス運用妨害 (DoS)の脆弱性 サイボウズ株式会社が提供するサイボウズ Office には、API に関するサービス運用妨害(DoS)の脆弱性が存在します。 CVE-2016-4449 CVE-2016-4449 20099 7.8 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-000066.html 2017-04-11 2017-04-11 View