9.8
CRITICAL
CVE-2016-4448
Libxml2 Format String Vulnerability
Description

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.

INFO

Published Date :

June 9, 2016, 4:59 p.m.

Last Modified :

Feb. 12, 2023, 11:21 p.m.

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Affected Products

The following products are affected by CVE-2016-4448 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Redhat enterprise_linux_desktop
2 Redhat enterprise_linux_server
3 Redhat enterprise_linux_workstation
4 Redhat enterprise_linux_server_aus
5 Redhat enterprise_linux_server_eus
6 Redhat enterprise_linux_server_tus
1 Apple itunes
2 Apple mac_os_x
3 Apple iphone_os
4 Apple tvos
5 Apple watchos
6 Apple icloud
1 Oracle linux
2 Oracle vm_server
1 Xmlsoft libxml2
1 Mcafee web_gateway
1 Hp icewall_federation_agent
1 Slackware slackware_linux
1 Tenable log_correlation_engine
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2016-4448.

URL Resource
http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html Mailing List Release Notes
http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html Mailing List Release Notes
http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html Mailing List Release Notes
http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html Mailing List Release Notes
http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html Mailing List Release Notes
http://rhn.redhat.com/errata/RHSA-2016-2957.html Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/05/25/2 Mailing List Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html Third Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Vendor Advisory
http://www.securityfocus.com/bid/90856 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1036348 Third Party Advisory VDB Entry
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722 Third Party Advisory
http://xmlsoft.org/news.html Release Notes
https://access.redhat.com/errata/RHSA-2016:1292 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1338700 Issue Tracking Third Party Advisory
https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9 Vendor Advisory
https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b Vendor Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709 Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10170 Third Party Advisory
https://support.apple.com/HT206899 Release Notes
https://support.apple.com/HT206901 Release Notes
https://support.apple.com/HT206902 Release Notes
https://support.apple.com/HT206903 Release Notes
https://support.apple.com/HT206904 Release Notes
https://support.apple.com/HT206905 Release Notes
https://www.tenable.com/security/tns-2016-18 Third Party Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2016-4448 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2016-4448 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CVE Modified by [email protected]

    Feb. 12, 2023

    Action Type Old Value New Value
    Changed Description CVE-2016-4448 libxml2: Format string vulnerability Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
    Removed CVSS V2 Metadata Access Complexity Insufficient Information
    Removed CVSS V2 Red Hat, Inc. (AV:N/AC:H/Au:N/C:P/I:P/A:P)
    Removed Reference https://access.redhat.com/errata/RHSA-2016:2957 [No Types Assigned]
    Removed Reference https://access.redhat.com/security/cve/CVE-2016-4448 [No Types Assigned]
  • CVE Modified by [email protected]

    Feb. 02, 2023

    Action Type Old Value New Value
    Changed Description Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. CVE-2016-4448 libxml2: Format string vulnerability
    Added CVSS V2 Red Hat, Inc. (AV:N/AC:H/Au:N/C:P/I:P/A:P)
    Added Reference https://access.redhat.com/security/cve/CVE-2016-4448 [No Types Assigned]
    Added Reference https://access.redhat.com/errata/RHSA-2016:2957 [No Types Assigned]
  • CPE Deprecation Remap by [email protected]

    Dec. 27, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:oracle:linux:6.0:*:*:*:*:*:*:* OR *cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
  • Reanalysis by [email protected]

    Sep. 25, 2019

    Action Type Old Value New Value
    Changed Reference Type http://www.openwall.com/lists/oss-security/2016/05/25/2 Mailing List http://www.openwall.com/lists/oss-security/2016/05/25/2 Mailing List, Third Party Advisory
    Changed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=1338700 Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1338700 Issue Tracking, Third Party Advisory
    Removed CPE Configuration OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:*
    Removed CPE Configuration OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:*
    Removed CPE Configuration OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:*
    Removed CPE Configuration OR *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:*
    Removed CPE Configuration OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:*
    Removed CPE Configuration OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:*
    Removed CPE Configuration OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:*
    Removed CPE Configuration OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:*
    Removed CPE Configuration OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
    Changed CPE Configuration AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    Changed CPE Configuration OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* OR *cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions up to (excluding) 10.11.6
    Changed CPE Configuration OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* AND OR *cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:* versions up to (excluding) 5.2.1 OR cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
    Changed CPE Configuration OR *cpe:2.3:o:apple:ios:*:*:*:*:*:*:*:* versions up to (including) 9.3.2 OR *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to (including) 9.3.2
    Changed CPE Configuration OR *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* OR *cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
    Changed CPE Configuration OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* OR *cpe:2.3:a:tenable:log_correlation_engine:4.8.0:*:*:*:*:*:*:*
    Added CPE Configuration OR *cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:* versions up to (including) 7.5.2.10 *cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:* versions from (including) 7.6.0.0 up to (including) 7.6.2.3
    Added CPE Configuration OR *cpe:2.3:o:oracle:linux:6.0:*:*:*:*:*:*:* *cpe:2.3:o:oracle:linux:7:0:*:*:*:*:*:*
  • Modified Analysis by [email protected]

    Sep. 20, 2019

    Action Type Old Value New Value
    Removed CVSS V3 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type http://rhn.redhat.com/errata/RHSA-2016-2957.html No Types Assigned http://rhn.redhat.com/errata/RHSA-2016-2957.html Third Party Advisory
    Changed Reference Type http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html No Types Assigned http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html Third Party Advisory
    Changed Reference Type http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html No Types Assigned http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html Third Party Advisory
    Changed Reference Type http://www.securityfocus.com/bid/90856 No Types Assigned http://www.securityfocus.com/bid/90856 Third Party Advisory, VDB Entry
    Changed Reference Type http://www.securitytracker.com/id/1036348 No Types Assigned http://www.securitytracker.com/id/1036348 Third Party Advisory, VDB Entry
    Changed Reference Type https://kc.mcafee.com/corporate/index?page=content&id=SB10170 No Types Assigned https://kc.mcafee.com/corporate/index?page=content&id=SB10170 Third Party Advisory
    Changed Reference Type https://www.tenable.com/security/tns-2016-18 No Types Assigned https://www.tenable.com/security/tns-2016-18 Third Party Advisory
    Removed CWE NVD-CWE-noinfo
    Added CWE CWE-134
    Changed CPE Configuration AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* AND OR *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Apr. 22, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* OR *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Apr. 22, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* OR *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Mar. 08, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:apple:apple_tv:*:*:*:*:*:*:*:* versions from (including) 9.2.1 OR *cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* versions from (including) 9.2.1
  • CVE Modified by [email protected]

    Jan. 05, 2018

    Action Type Old Value New Value
    Added Reference http://rhn.redhat.com/errata/RHSA-2016-2957.html [No Types Assigned]
  • CVE Modified by [email protected]

    Sep. 01, 2017

    Action Type Old Value New Value
    Added Reference http://www.securitytracker.com/id/1036348 [No Types Assigned]
  • CVE Modified by [email protected]

    Mar. 01, 2017

    Action Type Old Value New Value
    Added Reference https://www.tenable.com/security/tns-2016-18 [No Types Assigned]
  • CVE Modified by [email protected]

    Dec. 28, 2016

    Action Type Old Value New Value
    Removed Reference http://www-01.ibm.com/support/docview.wss?uid=swg21986391 [Third Party Advisory]
    Removed Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html [Mailing List, Third Party Advisory]
    Removed Reference https://bugzilla.gnome.org/show_bug.cgi?id=761029 [Issue Tracking, Permissions Required]
    Removed Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html [Mailing List, Third Party Advisory]
    Removed Reference http://advisories.mageia.org/MGASA-2016-0263.html [Third Party Advisory]
    Removed Reference https://bugzilla.suse.com/show_bug.cgi?id=981549 [Issue Tracking]
    Removed Reference https://www.suse.com/security/cve/CVE-2016-4448 [Third Party Advisory]
    Removed Reference https://access.redhat.com/security/cve/CVE-2016-4448 [No Types Assigned]
    Removed Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html [Mailing List, Third Party Advisory]
    Added Reference https://kc.mcafee.com/corporate/index?page=content&id=SB10170 [No Types Assigned]
  • CVE Modified by [email protected]

    Nov. 28, 2016

    Action Type Old Value New Value
    Added Reference http://www.securityfocus.com/bid/90856 [No Types Assigned]
  • CVE Modified by [email protected]

    Sep. 28, 2016

    Action Type Old Value New Value
    Added Reference http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
  • CVE Modified by [email protected]

    Sep. 23, 2016

    Action Type Old Value New Value
    Added Reference http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
  • Modified Analysis by [email protected]

    Sep. 14, 2016

    Action Type Old Value New Value
    Changed CPE Configuration Configuration 1 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 7 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 9 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 10 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 14 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 15 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 17 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 21 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 22 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 1 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 8 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 10 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 14 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 15 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 17 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 20 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 21 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 22 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:*
  • Modified Analysis by [email protected]

    Sep. 14, 2016

    Action Type Old Value New Value
    Changed CPE Configuration Configuration 1 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 2 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 6 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 10 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 11 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 14 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 15 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 17 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 21 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 22 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 1 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 7 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 9 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 10 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 14 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 15 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 17 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 21 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 22 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:*
  • Modified Analysis by [email protected]

    Sep. 12, 2016

    Action Type Old Value New Value
    Changed CPE Configuration Configuration 1 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 5 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 10 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 14 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 15 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 16 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 17 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 21 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 1 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 2 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 5 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 6 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:*:* *cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 10 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 11 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 14 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 15 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 16 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 17 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 21 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 22 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:*
    Changed Reference Type http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html No Types Assigned http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Vendor Advisory
  • CVE Modified by [email protected]

    Sep. 09, 2016

    Action Type Old Value New Value
    Added Reference http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
  • Modified Analysis by [email protected]

    Aug. 23, 2016

    Action Type Old Value New Value
    Changed CPE Configuration Configuration 1 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous) Configuration 1 OR *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:-:*:*:*:*:*:* Configuration 2 OR *cpe:2.3:o:novell:opensuse_leap:42.1:*:*:*:*:*:*:* Configuration 3 OR *cpe:2.3:o:mageia.org:mageia:5:*:*:*:*:*:*:* Configuration 4 OR *cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:* Configuration 5 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Configuration 6 OR *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8.1:*:*:*:*:*:*:* *cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:* Configuration 7 OR *cpe:2.3:o:novell:suse_manager_proxy:2.1:*:*:*:*:*:*:* Configuration 8 OR *cpe:2.3:a:apple:icloud_for_windows:5.2:*:*:*:*:*:*:* Configuration 9 OR *cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:* *cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:* Configuration 10 AND OR *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* *cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:* OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* Configuration 11 OR *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:sp1:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp2:*:*:ltss:*:*:* *cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:-:*:*:*:*:*:* Configuration 12 OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* Configuration 13 OR *cpe:2.3:o:apple:watchos:2.2.1:*:*:*:*:*:*:* (and previous) Configuration 14 OR *cpe:2.3:o:apple:ios:9.3.2:*:*:*:*:*:*:* (and previous) Configuration 15 OR *cpe:2.3:o:apple:mac_os_x:10.9.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:* *cpe:2.3:o:apple:mac_os_x:10.10.5:*:*:*:*:*:*:* Configuration 16 AND OR *cpe:2.3:a:apple:itunes:12.4.1:*:*:*:*:*:*:* (and previous) OR cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Configuration 17 OR *cpe:2.3:a:redhat:jboss_web_server:3.0:*:*:*:*:*:*:* Configuration 18 OR *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:sp1:*:*:*:*:*:* *cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:-:*:*:*:*:*:* Configuration 19 OR *cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:* Configuration 20 OR *cpe:2.3:o:apple:tvos:9.2.1:*:*:*:*:*:*:* (and previous) Configuration 21 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous)
    Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html Release Notes, Mailing List
    Changed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=1338700 No Types Assigned https://bugzilla.redhat.com/show_bug.cgi?id=1338700 Issue Tracking
    Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html Release Notes, Mailing List
    Changed Reference Type https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709 No Types Assigned https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709 Third Party Advisory
    Changed Reference Type https://support.apple.com/HT206904 No Types Assigned https://support.apple.com/HT206904 Release Notes
    Changed Reference Type https://support.apple.com/HT206899 No Types Assigned https://support.apple.com/HT206899 Release Notes
    Changed Reference Type https://support.apple.com/HT206902 No Types Assigned https://support.apple.com/HT206902 Release Notes
    Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html Release Notes, Mailing List
    Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html Release Notes, Mailing List
    Changed Reference Type https://support.apple.com/HT206905 No Types Assigned https://support.apple.com/HT206905 Release Notes
    Changed Reference Type http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722 No Types Assigned http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722 Third Party Advisory
    Changed Reference Type http://www.openwall.com/lists/oss-security/2016/05/25/2 No Types Assigned http://www.openwall.com/lists/oss-security/2016/05/25/2 Mailing List
    Changed Reference Type https://support.apple.com/HT206903 No Types Assigned https://support.apple.com/HT206903 Release Notes
    Changed Reference Type https://access.redhat.com/errata/RHSA-2016:1292 No Types Assigned https://access.redhat.com/errata/RHSA-2016:1292 Third Party Advisory
    Changed Reference Type http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html No Types Assigned http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html Release Notes, Mailing List
    Changed Reference Type https://support.apple.com/HT206901 No Types Assigned https://support.apple.com/HT206901 Release Notes
    Changed Reference Type http://xmlsoft.org/news.html No Types Assigned http://xmlsoft.org/news.html Release Notes
    Added Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html
    Added Reference http://advisories.mageia.org/MGASA-2016-0263.html
    Added Reference http://www-01.ibm.com/support/docview.wss?uid=swg21986391
    Added Reference https://access.redhat.com/security/cve/CVE-2016-4448
    Added Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00026.html
    Added Reference https://bugzilla.suse.com/show_bug.cgi?id=981549
    Added Reference https://www.suse.com/security/cve/CVE-2016-4448
    Added Reference https://bugzilla.gnome.org/show_bug.cgi?id=761029
    Added Reference http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00012.html
  • CVE Modified by [email protected]

    Aug. 17, 2016

    Action Type Old Value New Value
    Added Reference https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709
  • CVE Modified by [email protected]

    Jul. 23, 2016

    Action Type Old Value New Value
    Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html
    Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
    Added Reference https://support.apple.com/HT206904
    Added Reference https://support.apple.com/HT206899
    Added Reference https://support.apple.com/HT206902
    Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html
    Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html
    Added Reference https://support.apple.com/HT206905
    Added Reference https://support.apple.com/HT206903
    Added Reference http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
    Added Reference https://support.apple.com/HT206901
  • CVE Modified by [email protected]

    Jul. 14, 2016

    Action Type Old Value New Value
    Added Reference https://access.redhat.com/errata/RHSA-2016:1292
  • CVE Modified by [email protected]

    Jun. 21, 2016

    Action Type Old Value New Value
    Added Reference http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722
  • Modified Analysis by [email protected]

    Jun. 10, 2016

    Action Type Old Value New Value
    Added CPE Configuration Configuration 1 OR *cpe:2.3:a:xmlsoft:libxml2:2.9.3:*:*:*:*:*:*:* (and previous)
    Added CVSS V2 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
    Added CVSS V3 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9 No Types Assigned https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9 Advisory
    Changed Reference Type https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b No Types Assigned https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b Advisory
    Added CWE NVD-CWE-noinfo
  • Initial Analysis by [email protected]

    Jun. 09, 2016

    Action Type Old Value New Value
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2016-4448 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2016-4448 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

1.02 }} 0.13%

score

0.83879

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability