{"schemaVersion":3,"id":"CVE-2016-4447","aliases":["UBUNTU-CVE-2016-4447","DEBIAN-CVE-2016-4447"],"status":"published","duplicateOf":null,"title":null,"description":"The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.","dates":{"published":"2016-06-09T16:00:00.000Z","modified":"2024-08-06T00:32:25.110Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.1398,"percentile":0.96515,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.1398},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.11141,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.1398,"percentile":0.96515}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.11141,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.1398,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.1398,"percentile":0.96515}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_B7B89C2455AB03A2","name":"Exploit Reference (slackware.com)","source":"reference","url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"apple","product":"iphone_os","name":"iphone os","label":"iphone_os","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 9.3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 9.3.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"ios","label":"Apple iOS","category":"os"}},"hubHref":"/vendor/apple/iphone_os"},{"vendor":"apple","product":"itunes","name":"itunes","label":"itunes","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12.4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.4.1","eol":null,"hubHref":"/vendor/apple/itunes"},{"vendor":"apple","product":"mac_os_x","name":"mac os x","label":"mac_os_x","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 10.11.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 10.11.5","eol":null,"hubHref":"/vendor/apple/mac_os_x"},{"vendor":"apple","product":"tvos","name":"tvos","label":"tvos","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 9.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 9.2.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"tvos","label":"Apple tvOS","category":"os"}},"hubHref":"/vendor/apple/tvos"},{"vendor":"apple","product":"watchos","name":"watchos","label":"watchos","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 2.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.2.1","eol":null,"hubHref":"/vendor/apple/watchos"},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.04","noFixRecorded":false,"fixedIn":null},{"text":"14.04","noFixRecorded":false,"fixedIn":null},{"text":"15.10","noFixRecorded":false,"fixedIn":null},{"text":"16.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.04 | 14.04 | 15.10 | 16.04","eol":{"isEol":true,"eolDate":"2017-04-28T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.04","label":"12.04 'Precise Pangolin' (LTS)","eolFrom":"2017-04-28T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"12.04.5"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"libxml2","name":"libxml2","label":"libxml2","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libxml2","purlType":"deb","versions":[{"text":"< 2.9.3+dfsg1-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.9.3+dfsg1-1.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libxml2","name":"libxml2","label":"libxml2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libxml2","purlType":"deb","versions":[{"text":"< 2.9.1+dfsg1-3ubuntu4.8","noFixRecorded":false,"fixedIn":null},{"text":"< 2.9.3+dfsg1-1ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.9.1+dfsg1-3ubuntu4.8 | < 2.9.3+dfsg1-1ubuntu0.1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null},{"text":"8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0 | 8.0","eol":{"isEol":true,"eolDate":"2018-05-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"7","label":"7 (Wheezy)","eolFrom":"2018-05-31T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"7.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"hp","product":"icewall_federation_agent","name":"icewall federation agent","label":"icewall_federation_agent","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.0","eol":null,"hubHref":"/vendor/hp/icewall_federation_agent"},{"vendor":"mcafee","product":"web_gateway","name":"web gateway","label":"web_gateway","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 7.5.0.0, ≤ 7.5.2.10","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.6.0.0, ≤ 7.6.2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 7.5.0.0, ≤ 7.5.2.10 | ≥ 7.6.0.0, ≤ 7.6.2.3","eol":null,"hubHref":"/vendor/mcafee/web_gateway"},{"vendor":"oracle","product":"vm_server","name":"vm server","label":"vm_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.3","noFixRecorded":false,"fixedIn":null},{"text":"3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.3 | 3.4","eol":null,"hubHref":"/vendor/oracle/vm_server"},{"vendor":"xmlsoft","product":"libxml2","name":"libxml2","label":"libxml2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.9.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.9.3","eol":null,"hubHref":"/vendor/xmlsoft/libxml2"}],"affectedCount":13,"eol":{"hasEol":true,"count":2},"references":[{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","label":"www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10170","label":"kc.mcafee.com/corporate/index?page=content&id=SB10170","hostname":"kc.mcafee.com","tags":["X Refsource CONFIRM","Patch","Third Party Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722","label":"www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722","hostname":"www.slackware.com","tags":["Vendor Advisory","X Refsource SLACKWARE","Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/90864","label":"www.securityfocus.com/bid/90864","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1292","label":"access.redhat.com/errata/RHSA-2016:1292","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/25/2","label":"www.openwall.com/lists/oss-security/2016/05/25/2","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","label":"www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://www.debian.org/security/2016/dsa-3593","label":"www.debian.org/security/2016/dsa-3593","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","label":"lists.apple.com/archives/security-announce/2016/Jul/msg00003.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List","Not Applicable"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","label":"lists.apple.com/archives/security-announce/2016/Jul/msg00002.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","label":"lists.apple.com/archives/security-announce/2016/Jul/msg00001.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List","Third Party Advisory"]},{"url":"http://xmlsoft.org/news.html","label":"xmlsoft.org/news.html","hostname":"xmlsoft.org","tags":["X Refsource CONFIRM","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT206901","label":"support.apple.com/HT206901","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2994-1","label":"www.ubuntu.com/usn/USN-2994-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","label":"www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83","label":"git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83","hostname":"git.gnome.org","tags":["X Refsource CONFIRM","Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","label":"lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html","label":"lists.apple.com/archives/security-announce/2016/Jul/msg00005.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","label":"www.tenable.com/security/tns-2016-18","hostname":"www.tenable.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","label":"rhn.redhat.com/errata/RHSA-2016-2957.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://support.apple.com/HT206905","label":"support.apple.com/HT206905","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036348","label":"www.securitytracker.com/id/1036348","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","label":"support.apple.com/HT206903","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://support.apple.com/HT206902","label":"support.apple.com/HT206902","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://support.apple.com/HT206904","label":"support.apple.com/HT206904","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709","label":"h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709","hostname":"h20566.www2.hpe.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://support.apple.com/HT206899","label":"support.apple.com/HT206899","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-4447","label":"ubuntu.com/security/CVE-2016-4447","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-2994-1","label":"ubuntu.com/security/notices/USN-2994-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4447","label":"www.cve.org/CVERecord?id=CVE-2016-4447","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-4447","label":"security-tracker.debian.org/tracker/CVE-2016-4447","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-503-1","DSA-3593-1","MGASA-2016-0263","RHSA-2016:1292","SUSE-SU-2016:1538-1","SUSE-SU-2016:1604-1","USN-2994-1"],"duplicates":[],"related":["SUSE-SU-2016:1538-1","SUSE-SU-2016:1604-1","USN-2994-1"]},"timeline":[{"kind":"published","date":"2016-06-09T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T00:32:25.110Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":43,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:47:13.721Z","stale":false,"partial":false}}