libxml2 CVE-2016-9596 Incomplete Fix Denial of Service Vulnerability

Bugtraq ID:	105201
Class:	Boundary Condition Error
CVE:	CVE-2016-9596
Remote:	Yes
Local:	No
Published:	Dec 22 2016 12:00AM
Updated:	Dec 22 2016 12:00AM
Credit:	Bharti Kundal
Vulnerable:	XMLSoft Libxml2 - Redhat JBoss Core Services 1
Not Vulnerable:

libxml2 CVE-2016-9596 Incomplete Fix Denial of Service Vulnerability

Libxml2 is prone to a denial-of-service vulnerability.

A remote attacker can exploit this issue to stop the affected system from responding, resulting in denial-of-service conditions.

libxml2 CVE-2016-9596 Incomplete Fix Denial of Service Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

libxml2 CVE-2016-9596 Incomplete Fix Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

libxml2 CVE-2016-9596 Incomplete Fix Denial of Service Vulnerability

References:

• libxml2 Homepage (xmlsoft)
  
• CVE-2016-9596 libxml2: stack exhaustion while parsing xml files in recovery mode (Red Hat)