9.8
CRITICAL
CVE-2016-4448
Libxml2 Format String Vulnerability
Description
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
INFO
Published Date :
June 9, 2016, 4:59 p.m.
Last Modified :
Nov. 21, 2024, 2:52 a.m.
Source :
[email protected]
Remotely Exploitable :
Yes !
Impact Score :
5.9
Exploitability Score :
3.9
Affected Products
The following products are affected by CVE-2016-4448
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2016-4448.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2016-4448 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2016-4448 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html Added Reference http://rhn.redhat.com/errata/RHSA-2016-2957.html Added Reference http://www.openwall.com/lists/oss-security/2016/05/25/2 Added Reference http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html Added Reference http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html Added Reference http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Added Reference http://www.securityfocus.com/bid/90856 Added Reference http://www.securitytracker.com/id/1036348 Added Reference http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722 Added Reference http://xmlsoft.org/news.html Added Reference https://access.redhat.com/errata/RHSA-2016:1292 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=1338700 Added Reference https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9 Added Reference https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b Added Reference https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709 Added Reference https://kc.mcafee.com/corporate/index?page=content&id=SB10170 Added Reference https://support.apple.com/HT206899 Added Reference https://support.apple.com/HT206901 Added Reference https://support.apple.com/HT206902 Added Reference https://support.apple.com/HT206903 Added Reference https://support.apple.com/HT206904 Added Reference https://support.apple.com/HT206905 Added Reference https://www.tenable.com/security/tns-2016-18 -
CVE Modified by [email protected]
May. 14, 2024
Action Type Old Value New Value -
CVE Modified by [email protected]
Feb. 12, 2023
Action Type Old Value New Value Changed Description CVE-2016-4448 libxml2: Format string vulnerability Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. Removed CVSS V2 Metadata Access Complexity Insufficient Information Removed CVSS V2 Red Hat, Inc. (AV:N/AC:H/Au:N/C:P/I:P/A:P) Removed Reference https://access.redhat.com/errata/RHSA-2016:2957 [No Types Assigned] Removed Reference https://access.redhat.com/security/cve/CVE-2016-4448 [No Types Assigned] -
CVE Modified by [email protected]
Feb. 02, 2023
Action Type Old Value New Value Changed Description Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. CVE-2016-4448 libxml2: Format string vulnerability Added CVSS V2 Red Hat, Inc. (AV:N/AC:H/Au:N/C:P/I:P/A:P) Added Reference https://access.redhat.com/security/cve/CVE-2016-4448 [No Types Assigned] Added Reference https://access.redhat.com/errata/RHSA-2016:2957 [No Types Assigned] -
CPE Deprecation Remap by [email protected]
Dec. 27, 2019
Action Type Old Value New Value Changed CPE Configuration OR *cpe:2.3:o:oracle:linux:6.0:*:*:*:*:*:*:* OR *cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:* -
Reanalysis by [email protected]
Sep. 25, 2019
Action Type Old Value New Value Changed Reference Type http://www.openwall.com/lists/oss-security/2016/05/25/2 Mailing List http://www.openwall.com/lists/oss-security/2016/05/25/2 Mailing List, Third Party Advisory Changed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=1338700 Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1338700 Issue Tracking, Third Party Advisory Removed CPE Configuration OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* Removed CPE Configuration OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Removed CPE Configuration OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Removed CPE Configuration OR *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* Removed CPE Configuration OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Removed CPE Configuration OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* Removed CPE Configuration OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* Removed CPE Configuration OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Removed CPE Configuration OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Removed CPE Configuration AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Changed CPE Configuration AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Changed CPE Configuration OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* OR *cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions up to (excluding) 10.11.6 Changed CPE Configuration OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* AND OR *cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:* versions up to (excluding) 5.2.1 OR cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Changed CPE Configuration OR *cpe:2.3:o:apple:ios:*:*:*:*:*:*:*:* versions up to (including) 9.3.2 OR *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to (including) 9.3.2 Changed CPE Configuration OR *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* OR *cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Changed CPE Configuration OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* OR *cpe:2.3:a:tenable:log_correlation_engine:4.8.0:*:*:*:*:*:*:* Added CPE Configuration OR *cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:* versions up to (including) 7.5.2.10 *cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:* versions from (including) 7.6.0.0 up to (including) 7.6.2.3 Added CPE Configuration OR *cpe:2.3:o:oracle:linux:6.0:*:*:*:*:*:*:* *cpe:2.3:o:oracle:linux:7:0:*:*:*:*:*:* -
Modified Analysis by [email protected]
Sep. 20, 2019
Action Type Old Value New Value Removed CVSS V3 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Changed Reference Type http://rhn.redhat.com/errata/RHSA-2016-2957.html No Types Assigned http://rhn.redhat.com/errata/RHSA-2016-2957.html Third Party Advisory Changed Reference Type http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html No Types Assigned http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html Third Party Advisory Changed Reference Type http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html No Types Assigned http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html Third Party Advisory Changed Reference Type http://www.securityfocus.com/bid/90856 No Types Assigned http://www.securityfocus.com/bid/90856 Third Party Advisory, VDB Entry Changed Reference Type http://www.securitytracker.com/id/1036348 No Types Assigned http://www.securitytracker.com/id/1036348 Third Party Advisory, VDB Entry Changed Reference Type https://kc.mcafee.com/corporate/index?page=content&id=SB10170 No Types Assigned https://kc.mcafee.com/corporate/index?page=content&id=SB10170 Third Party Advisory Changed Reference Type https://www.tenable.com/security/tns-2016-18 No Types Assigned https://www.tenable.com/security/tns-2016-18 Third Party Advisory Removed CWE NVD-CWE-noinfo Added CWE CWE-134 Changed CPE Configuration AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* -
CPE Deprecation Remap by [email protected]
Apr. 22, 2019
Action Type Old Value New Value Changed CPE Configuration OR *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* OR *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* -
CPE Deprecation Remap by [email protected]
Apr. 22, 2019
Action Type Old Value New Value Changed CPE Configuration OR *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* OR *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* -
CPE Deprecation Remap by [email protected]
Mar. 08, 2019
Action Type Old Value New Value Changed CPE Configuration OR *cpe:2.3:o:apple:apple_tv:*:*:*:*:*:*:*:* versions from (including) 9.2.1 OR *cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* versions from (including) 9.2.1 -
CVE Modified by [email protected]
Jan. 05, 2018
Action Type Old Value New Value Added Reference http://rhn.redhat.com/errata/RHSA-2016-2957.html [No Types Assigned] -
CVE Modified by [email protected]
Sep. 01, 2017
Action Type Old Value New Value Added Reference http://www.securitytracker.com/id/1036348 [No Types Assigned] -
CVE Modified by [email protected]
Mar. 01, 2017
Action Type Old Value New Value Added Reference https://www.tenable.com/security/tns-2016-18 [No Types Assigned] -
CVE Modified by [email protected]
Dec. 28, 2016
Action Type Old Value New Value Removed Reference http://www-01.ibm.com/support/docview.wss?uid=swg21986391 [Third Party Advisory] Removed Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html [Mailing List, Third Party Advisory] Removed Reference https://bugzilla.gnome.org/show_bug.cgi?id=761029 [Issue Tracking, Permissions Required] Removed Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html [Mailing List, Third Party Advisory] Removed Reference http://advisories.mageia.org/MGASA-2016-0263.html [Third Party Advisory] Removed Reference https://bugzilla.suse.com/show_bug.cgi?id=981549 [Issue Tracking] Removed Reference https://www.suse.com/security/cve/CVE-2016-4448 [Third Party Advisory] Removed Reference https://access.redhat.com/security/cve/CVE-2016-4448 [No Types Assigned] Removed Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html [Mailing List, Third Party Advisory] Added Reference https://kc.mcafee.com/corporate/index?page=content&id=SB10170 [No Types Assigned] -
CVE Modified by [email protected]
Nov. 28, 2016
Action Type Old Value New Value Added Reference http://www.securityfocus.com/bid/90856 [No Types Assigned] -
CVE Modified by [email protected]
Sep. 28, 2016
Action Type Old Value New Value Added Reference http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html -
CVE Modified by [email protected]
Sep. 23, 2016
Action Type Old Value New Value Added Reference http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html -
Modified Analysis by [email protected]
Sep. 14, 2016
Action Type Old Value New Value Changed CPE Configuration Configuration 1 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 7 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 9 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 10 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 14 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 15 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 17 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 21 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 22 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 1 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 8 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 10 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 14 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 15 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 17 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 20 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 21 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 22 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* -
Modified Analysis by [email protected]
Sep. 14, 2016
Action Type Old Value New Value Changed CPE Configuration Configuration 1 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 2 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 6 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 10 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 11 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 14 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 15 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 17 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 21 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 22 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 1 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 7 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 9 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 10 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 14 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 15 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 17 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 21 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 22 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* -
Modified Analysis by [email protected]
Sep. 12, 2016
Action Type Old Value New Value Changed CPE Configuration Configuration 1 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 5 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 10 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 14 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 15 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 16 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 17 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 21 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 1 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 2 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 6 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 10 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 11 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 14 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 15 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 17 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 21 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 22 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Changed Reference Type http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html No Types Assigned http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Vendor Advisory -
CVE Modified by [email protected]
Sep. 09, 2016
Action Type Old Value New Value Added Reference http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html -
Modified Analysis by [email protected]
Aug. 23, 2016
Action Type Old Value New Value Changed CPE Configuration Configuration 1 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 1 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 5 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 10 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 14 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 15 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 16 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 17 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 21 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html Release Notes, Mailing List Changed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=1338700 No Types Assigned https://bugzilla.redhat.com/show_bug.cgi?id=1338700 Issue Tracking Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html Release Notes, Mailing List Changed Reference Type https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709 No Types Assigned https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709 Third Party Advisory Changed Reference Type https://support.apple.com/HT206904 No Types Assigned https://support.apple.com/HT206904 Release Notes Changed Reference Type https://support.apple.com/HT206899 No Types Assigned https://support.apple.com/HT206899 Release Notes Changed Reference Type https://support.apple.com/HT206902 No Types Assigned https://support.apple.com/HT206902 Release Notes Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html Release Notes, Mailing List Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html Release Notes, Mailing List Changed Reference Type https://support.apple.com/HT206905 No Types Assigned https://support.apple.com/HT206905 Release Notes Changed Reference Type http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722 No Types Assigned http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722 Third Party Advisory Changed Reference Type http://www.openwall.com/lists/oss-security/2016/05/25/2 No Types Assigned http://www.openwall.com/lists/oss-security/2016/05/25/2 Mailing List Changed Reference Type https://support.apple.com/HT206903 No Types Assigned https://support.apple.com/HT206903 Release Notes Changed Reference Type https://access.redhat.com/errata/RHSA-2016:1292 No Types Assigned https://access.redhat.com/errata/RHSA-2016:1292 Third Party Advisory Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html Release Notes, Mailing List Changed Reference Type https://support.apple.com/HT206901 No Types Assigned https://support.apple.com/HT206901 Release Notes Changed Reference Type http://xmlsoft.org/news.html No Types Assigned http://xmlsoft.org/news.html Release Notes Added Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html Added Reference http://advisories.mageia.org/MGASA-2016-0263.html Added Reference http://www-01.ibm.com/support/docview.wss?uid=swg21986391 Added Reference https://access.redhat.com/security/cve/CVE-2016-4448 Added Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html Added Reference https://bugzilla.suse.com/show_bug.cgi?id=981549 Added Reference https://www.suse.com/security/cve/CVE-2016-4448 Added Reference https://bugzilla.gnome.org/show_bug.cgi?id=761029 Added Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html -
CVE Modified by [email protected]
Aug. 17, 2016
Action Type Old Value New Value Added Reference https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709 -
CVE Modified by [email protected]
Jul. 23, 2016
Action Type Old Value New Value Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html Added Reference https://support.apple.com/HT206904 Added Reference https://support.apple.com/HT206899 Added Reference https://support.apple.com/HT206902 Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html Added Reference https://support.apple.com/HT206905 Added Reference https://support.apple.com/HT206903 Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html Added Reference https://support.apple.com/HT206901 -
CVE Modified by [email protected]
Jul. 14, 2016
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2016:1292 -
CVE Modified by [email protected]
Jun. 21, 2016
Action Type Old Value New Value Added Reference http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722 -
Modified Analysis by [email protected]
Jun. 10, 2016
Action Type Old Value New Value Added CPE Configuration Configuration 1 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Added CVSS V2 (AV:N/AC:L/Au:N/C:C/I:C/A:C) Added CVSS V3 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Changed Reference Type https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9 No Types Assigned https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9 Advisory Changed Reference Type https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b No Types Assigned https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b Advisory Added CWE NVD-CWE-noinfo -
Initial Analysis by [email protected]
Jun. 09, 2016
Action Type Old Value New Value
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2016-4448 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2016-4448
weaknesses.
Exploit Prediction
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.
0.88 }} -0.14%
score
0.82253
percentile
CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability