CVE-2016-4472: canonical ubuntu_linux
Vulnerability summary
CVE-2016-4472 is a high (CVSS 8.1) vulnerability in canonical ubuntu_linux. EPSS estimates a 11.95% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities.
Severe, CVSS 8.1 (NVD); no exploitation reported by the 5 checked sources; EPSS 12% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 4Timeline
- 30-06-2016PublishedVulnerability first disclosed.
- 08-10-2026Last modifiedVulnerability information updated.
Description
The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
11.95%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
No change 0.00 pp
From 11.95% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu11 products
- ayttmAll versions (No fix recorded)
- cableswigAll versions (No fix recorded)
- cadaverAll versions (No fix recorded)
- coin3All versions (No fix recorded)
- insighttoolkitAll versions (No fix recorded)
Debian2 products
- expat< 2.1.1-2
- libxmltokAll versions (No fix recorded)
Alpine1 product
- expat< 2.1.1-r2
Canonical1 product
- ubuntu_linuxEOL12.04
Libexpat_project1 product
- libexpat≤ 2.1.1
Mcafee1 product
- policy_auditor< 6.5.1
Python1 product
- python≥ 2.7.0, < 2.7.15 | ≥ 3.3.0, < 3.3.7 | ≥ 3.4.0, < 3.4.7 | ≥ 3.5.0, < 3.5.4 | ≥ 3.6.0, < 3.6.2
7 vendors · 18 products
References
14 links- bugzilla.redhat.com/show_bug.cgi?id=1344251X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
- sourceforge.net/p/expat/code_git/ci/f0bec73b018caa07d3e75ec8dd967f3785d71bdeX Refsource CONFIRMPatchThird Party Advisory
