CVE-2016-4447: apple iphone_os

CVSS: 7.5v3.0HighModified

AliasesUBUNTU-CVE-2016-4447DEBIAN-CVE-2016-4447

Published 09-06-2016Last modified 06-08-2024

Vulnerability summary

CVE-2016-4447 is a high (CVSS 7.5) vulnerability in apple iphone_os. EPSS estimates a 13.98% chance of exploitation in the next 30 days, higher than 96.5% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

43/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.0 (NVD)

EPSS score

13.98%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 7 · Related 3

DLA-503-1 DSA-3593-1 MGASA-2016-0263 RHSA-2016:1292 SUSE-SU-2016:1538-1 SUSE-SU-2016:1604-1+1 more

Timeline

09-06-2016
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.07.5v2.05.0

EPSS trend

Probability

13.98%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 13.98% on 18-09-2026

18-09-202618-10-2026

EPSS score

13.98%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (slackware.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Apple5 products

iphone_os≤ 9.3.2
itunes12.4.1
mac_os_x≤ 10.11.5
tvos≤ 9.2.1
watchos≤ 2.2.1

Debian2 products

libxml2< 2.9.3+dfsg1-1.1
debian_linuxEOL7.0 | 8.0

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 15.10 | 16.04

Hp1 product

icewall_federation_agent3.0

Mcafee1 product

web_gateway≥ 7.5.0.0, ≤ 7.5.2.10 | ≥ 7.6.0.0, ≤ 7.6.2.3

Oracle1 product

vm_server3.3 | 3.4

Ubuntu1 product

libxml2< 2.9.1+dfsg1-3ubuntu4.8 | < 2.9.3+dfsg1-1ubuntu0.1

Xmlsoft1 product

libxml2≤ 2.9.3

8 vendors · 13 products

References

31 links

www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRMThird Party Advisory
kc.mcafee.com/corporate/index?page=content&id=SB10170X Refsource CONFIRMPatchThird Party Advisory
www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722Vendor AdvisoryX Refsource SLACKWAREExploitMailing ListThird Party Advisory
www.securityfocus.com/bid/90864VDB EntryX Refsource BIDThird Party Advisory
access.redhat.com/errata/RHSA-2016:1292Vendor AdvisoryX Refsource REDHATThird Party Advisory
www.openwall.com/lists/oss-security/2016/05/25/2Mailing ListX Refsource MLISTThird Party Advisory
www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlX Refsource CONFIRMThird Party Advisory
www.debian.org/security/2016/dsa-3593Vendor AdvisoryX Refsource DEBIANThird Party Advisory
lists.apple.com/archives/security-announce/2016/Jul/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListNot Applicable
lists.apple.com/archives/security-announce/2016/Jul/msg00002.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory

Show all 31 references

lists.apple.com/archives/security-announce/2016/Jul/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
xmlsoft.org/news.htmlX Refsource CONFIRMRelease NotesVendor Advisory
support.apple.com/HT206901X Refsource CONFIRMThird Party Advisory
www.ubuntu.com/usn/USN-2994-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlX Refsource CONFIRMThird Party Advisory
git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83X Refsource CONFIRMPatchThird Party Advisory
lists.apple.com/archives/security-announce/2016/Jul/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
lists.apple.com/archives/security-announce/2016/Jul/msg00005.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
www.tenable.com/security/tns-2016-18X Refsource CONFIRMThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2957.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
support.apple.com/HT206905X Refsource CONFIRMThird Party Advisory
www.securitytracker.com/id/1036348VDB EntryX Refsource SECTRACKThird Party Advisory
support.apple.com/HT206903X Refsource CONFIRMThird Party Advisory
support.apple.com/HT206902X Refsource CONFIRMThird Party Advisory
support.apple.com/HT206904X Refsource CONFIRMThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709X Refsource CONFIRMThird Party Advisory
support.apple.com/HT206899X Refsource CONFIRMThird Party Advisory
ubuntu.com/security/CVE-2016-4447REPORT
ubuntu.com/security/notices/USN-2994-1Advisory
www.cve.org/CVERecord?id=CVE-2016-4447REPORT
security-tracker.debian.org/tracker/CVE-2016-4447Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities