csaf_suse - suse-su-2016:1538-1

suse-su-2016:1538-1

Vulnerability from csaf_suse

Published

2016-06-09 12:41

Modified

2016-06-09 12:41

Summary

Security update for libxml2

Notes

Title of the patch

Security update for libxml2

Description of the patch

This update for libxml2 fixes the following security issues: - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c [bsc#963963, bsc#965283, bsc#981114]. - CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings [bsc#978395]. - CVE-2016-1762: Fixed a heap-based buffer overread in xmlNextChar [bsc#981040]. - CVE-2016-1834: Fixed a heap-buffer-overflow in xmlStrncat [bsc#981041]. - CVE-2016-1833: Fixed a heap-based buffer overread in htmlCurrentChar [bsc#981108]. - CVE-2016-1835: Fixed a heap use-after-free in xmlSAX2AttributeNs [bsc#981109]. - CVE-2016-1837: Fixed a heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral [bsc#981111]. - CVE-2016-1838: Fixed a heap-based buffer overread in xmlParserPrintFileContextInternal [bsc#981112]. - CVE-2016-1840: Fixed a heap-buffer-overflow in xmlFAParsePosCharGroup [bsc#981115]. - CVE-2016-4447: Fixed a heap-based buffer-underreads due to xmlParseName [bsc#981548]. - CVE-2016-4448: Fixed some format string warnings with possible format string vulnerability [bsc#981549], - CVE-2016-4449: Fixed inappropriate fetch of entities content [bsc#981550]. - CVE-2016-3705: Fixed missing increment of recursion counter.

Patchnames

SUSE-SLE-DESKTOP-12-2016-915,SUSE-SLE-DESKTOP-12-SP1-2016-915,SUSE-SLE-SDK-12-2016-915,SUSE-SLE-SDK-12-SP1-2016-915,SUSE-SLE-SERVER-12-2016-915,SUSE-SLE-SERVER-12-SP1-2016-915

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libxml2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for libxml2 fixes the following security issues: \n\n- CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread\n  was fixed in libxml2/dict.c  [bsc#963963, bsc#965283, bsc#981114].\n- CVE-2016-4483: Code was added to avoid an out of bound access when\n  serializing malformed strings [bsc#978395].\n- CVE-2016-1762: Fixed a heap-based buffer overread in xmlNextChar [bsc#981040].\n- CVE-2016-1834: Fixed a heap-buffer-overflow in xmlStrncat [bsc#981041].\n- CVE-2016-1833: Fixed a heap-based buffer overread in htmlCurrentChar [bsc#981108].\n- CVE-2016-1835: Fixed a heap use-after-free in xmlSAX2AttributeNs [bsc#981109].\n- CVE-2016-1837: Fixed a heap use-after-free in htmlParsePubidLiteral\n  and htmlParseSystemiteral [bsc#981111].\n- CVE-2016-1838: Fixed a heap-based buffer overread in\n  xmlParserPrintFileContextInternal [bsc#981112].\n- CVE-2016-1840: Fixed a heap-buffer-overflow in xmlFAParsePosCharGroup [bsc#981115].\n- CVE-2016-4447: Fixed a heap-based buffer-underreads due to xmlParseName [bsc#981548].\n- CVE-2016-4448: Fixed some format string warnings with possible format\n  string vulnerability [bsc#981549],\n- CVE-2016-4449: Fixed inappropriate fetch of entities content [bsc#981550].\n- CVE-2016-3705: Fixed missing increment of recursion counter.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-2016-915,SUSE-SLE-DESKTOP-12-SP1-2016-915,SUSE-SLE-SDK-12-2016-915,SUSE-SLE-SDK-12-SP1-2016-915,SUSE-SLE-SERVER-12-2016-915,SUSE-SLE-SERVER-12-SP1-2016-915",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1538-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:1538-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161538-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:1538-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-June/002104.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 963963",
        "url": "https://bugzilla.suse.com/963963"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 965283",
        "url": "https://bugzilla.suse.com/965283"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 978395",
        "url": "https://bugzilla.suse.com/978395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981040",
        "url": "https://bugzilla.suse.com/981040"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981041",
        "url": "https://bugzilla.suse.com/981041"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981108",
        "url": "https://bugzilla.suse.com/981108"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981109",
        "url": "https://bugzilla.suse.com/981109"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981111",
        "url": "https://bugzilla.suse.com/981111"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981112",
        "url": "https://bugzilla.suse.com/981112"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981114",
        "url": "https://bugzilla.suse.com/981114"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981115",
        "url": "https://bugzilla.suse.com/981115"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981548",
        "url": "https://bugzilla.suse.com/981548"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981549",
        "url": "https://bugzilla.suse.com/981549"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981550",
        "url": "https://bugzilla.suse.com/981550"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8806 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8806/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1762 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1762/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1833 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1833/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1834 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1834/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1835 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1835/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1837 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1837/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1838 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1838/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1839 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1839/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1840 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1840/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2073 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2073/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3705 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4447 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4447/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4448 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4448/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4449 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4449/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4483 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4483/"
      }
    ],
    "title": "Security update for libxml2",
    "tracking": {
      "current_release_date": "2016-06-09T12:41:39Z",
      "generator": {
        "date": "2016-06-09T12:41:39Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:1538-1",
      "initial_release_date": "2016-06-09T12:41:39Z",
      "revision_history": [
        {
          "date": "2016-06-09T12:41:39Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-doc-2.9.1-24.1.noarch",
                "product": {
                  "name": "libxml2-doc-2.9.1-24.1.noarch",
                  "product_id": "libxml2-doc-2.9.1-24.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-devel-2.9.1-24.1.ppc64le",
                "product": {
                  "name": "libxml2-devel-2.9.1-24.1.ppc64le",
                  "product_id": "libxml2-devel-2.9.1-24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-2-2.9.1-24.1.ppc64le",
                "product": {
                  "name": "libxml2-2-2.9.1-24.1.ppc64le",
                  "product_id": "libxml2-2-2.9.1-24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-tools-2.9.1-24.1.ppc64le",
                "product": {
                  "name": "libxml2-tools-2.9.1-24.1.ppc64le",
                  "product_id": "libxml2-tools-2.9.1-24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python-libxml2-2.9.1-24.1.ppc64le",
                "product": {
                  "name": "python-libxml2-2.9.1-24.1.ppc64le",
                  "product_id": "python-libxml2-2.9.1-24.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-devel-2.9.1-24.1.s390x",
                "product": {
                  "name": "libxml2-devel-2.9.1-24.1.s390x",
                  "product_id": "libxml2-devel-2.9.1-24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-2-2.9.1-24.1.s390x",
                "product": {
                  "name": "libxml2-2-2.9.1-24.1.s390x",
                  "product_id": "libxml2-2-2.9.1-24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-2-32bit-2.9.1-24.1.s390x",
                "product": {
                  "name": "libxml2-2-32bit-2.9.1-24.1.s390x",
                  "product_id": "libxml2-2-32bit-2.9.1-24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-tools-2.9.1-24.1.s390x",
                "product": {
                  "name": "libxml2-tools-2.9.1-24.1.s390x",
                  "product_id": "libxml2-tools-2.9.1-24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python-libxml2-2.9.1-24.1.s390x",
                "product": {
                  "name": "python-libxml2-2.9.1-24.1.s390x",
                  "product_id": "python-libxml2-2.9.1-24.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-2-2.9.1-24.1.x86_64",
                "product": {
                  "name": "libxml2-2-2.9.1-24.1.x86_64",
                  "product_id": "libxml2-2-2.9.1-24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-2-32bit-2.9.1-24.1.x86_64",
                "product": {
                  "name": "libxml2-2-32bit-2.9.1-24.1.x86_64",
                  "product_id": "libxml2-2-32bit-2.9.1-24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-tools-2.9.1-24.1.x86_64",
                "product": {
                  "name": "libxml2-tools-2.9.1-24.1.x86_64",
                  "product_id": "libxml2-tools-2.9.1-24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python-libxml2-2.9.1-24.1.x86_64",
                "product": {
                  "name": "python-libxml2-2.9.1-24.1.x86_64",
                  "product_id": "python-libxml2-2.9.1-24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-devel-2.9.1-24.1.x86_64",
                "product": {
                  "name": "libxml2-devel-2.9.1-24.1.x86_64",
                  "product_id": "libxml2-devel-2.9.1-24.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12",
                  "product_id": "SUSE Linux Enterprise Desktop 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12",
                  "product_id": "SUSE Linux Enterprise Server 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-devel-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-devel-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-devel-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-devel-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-devel-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-devel-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-doc-2.9.1-24.1.noarch as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch"
        },
        "product_reference": "libxml2-doc-2.9.1-24.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-doc-2.9.1-24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch"
        },
        "product_reference": "libxml2-doc-2.9.1-24.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-doc-2.9.1-24.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch"
        },
        "product_reference": "libxml2-doc-2.9.1-24.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-32bit-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-2-32bit-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-doc-2.9.1-24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch"
        },
        "product_reference": "libxml2-doc-2.9.1-24.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64"
        },
        "product_reference": "libxml2-tools-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-libxml2-2.9.1-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64"
        },
        "product_reference": "python-libxml2-2.9.1-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-8806",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8806"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the \"\u003c!DOCTYPE html\" substring in a crafted HTML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8806",
          "url": "https://www.suse.com/security/cve/CVE-2015-8806"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963963 for CVE-2015-8806",
          "url": "https://bugzilla.suse.com/963963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 965283 for CVE-2015-8806",
          "url": "https://bugzilla.suse.com/965283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981114 for CVE-2015-8806",
          "url": "https://bugzilla.suse.com/981114"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8806"
    },
    {
      "cve": "CVE-2016-1762",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1762"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1762",
          "url": "https://www.suse.com/security/cve/CVE-2016-1762"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1762",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981040 for CVE-2016-1762",
          "url": "https://bugzilla.suse.com/981040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1762"
    },
    {
      "cve": "CVE-2016-1833",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1833"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1833",
          "url": "https://www.suse.com/security/cve/CVE-2016-1833"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1833",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981108 for CVE-2016-1833",
          "url": "https://bugzilla.suse.com/981108"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1833"
    },
    {
      "cve": "CVE-2016-1834",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1834"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1834",
          "url": "https://www.suse.com/security/cve/CVE-2016-1834"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1834",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981041 for CVE-2016-1834",
          "url": "https://bugzilla.suse.com/981041"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1834"
    },
    {
      "cve": "CVE-2016-1835",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1835"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1835",
          "url": "https://www.suse.com/security/cve/CVE-2016-1835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1835",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981109 for CVE-2016-1835",
          "url": "https://bugzilla.suse.com/981109"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1835"
    },
    {
      "cve": "CVE-2016-1837",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1837"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1837",
          "url": "https://www.suse.com/security/cve/CVE-2016-1837"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1837",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981111 for CVE-2016-1837",
          "url": "https://bugzilla.suse.com/981111"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1837"
    },
    {
      "cve": "CVE-2016-1838",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1838"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1838",
          "url": "https://www.suse.com/security/cve/CVE-2016-1838"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1838",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981112 for CVE-2016-1838",
          "url": "https://bugzilla.suse.com/981112"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1838"
    },
    {
      "cve": "CVE-2016-1839",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1839"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1839",
          "url": "https://www.suse.com/security/cve/CVE-2016-1839"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1039069 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1039069"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1039661 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1039661"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1069433 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1069433"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1069690 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1069690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963963 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/963963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981114 for CVE-2016-1839",
          "url": "https://bugzilla.suse.com/981114"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1839"
    },
    {
      "cve": "CVE-2016-1840",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1840"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1840",
          "url": "https://www.suse.com/security/cve/CVE-2016-1840"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-1840",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981115 for CVE-2016-1840",
          "url": "https://bugzilla.suse.com/981115"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-1840"
    },
    {
      "cve": "CVE-2016-2073",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2073"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2073",
          "url": "https://www.suse.com/security/cve/CVE-2016-2073"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963963 for CVE-2016-2073",
          "url": "https://bugzilla.suse.com/963963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2073"
    },
    {
      "cve": "CVE-2016-3705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3705",
          "url": "https://www.suse.com/security/cve/CVE-2016-3705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017497 for CVE-2016-3705",
          "url": "https://bugzilla.suse.com/1017497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-3705",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 975947 for CVE-2016-3705",
          "url": "https://bugzilla.suse.com/975947"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3705"
    },
    {
      "cve": "CVE-2016-4447",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4447"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4447",
          "url": "https://www.suse.com/security/cve/CVE-2016-4447"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-4447",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981548 for CVE-2016-4447",
          "url": "https://bugzilla.suse.com/981548"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-4447"
    },
    {
      "cve": "CVE-2016-4448",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4448"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4448",
          "url": "https://www.suse.com/security/cve/CVE-2016-4448"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010299 for CVE-2016-4448",
          "url": "https://bugzilla.suse.com/1010299"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-4448",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981549 for CVE-2016-4448",
          "url": "https://bugzilla.suse.com/981549"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-4448"
    },
    {
      "cve": "CVE-2016-4449",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4449"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4449",
          "url": "https://www.suse.com/security/cve/CVE-2016-4449"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-4449",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981550 for CVE-2016-4449",
          "url": "https://bugzilla.suse.com/981550"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-4449"
    },
    {
      "cve": "CVE-2016-4483",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4483"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4483",
          "url": "https://www.suse.com/security/cve/CVE-2016-4483"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1026101 for CVE-2016-4483",
          "url": "https://bugzilla.suse.com/1026101"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123919 for CVE-2016-4483",
          "url": "https://bugzilla.suse.com/1123919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 978395 for CVE-2016-4483",
          "url": "https://bugzilla.suse.com/978395"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-24.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-09T12:41:39Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-4483"
    }
  ]
}

CVE-2016-1837 (GCVE-0-2016-1837)

Vulnerability from cvelistv5

Published

2016-05-20 10:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://support.apple.com/HT206567	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90691	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	https://support.apple.com/HT206566	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=11ed4a7a90d5ce156a18980a4ad4e53e77384852	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00003.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206564	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1035890	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2016/May/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206568	x_refsource_CONFIRM
	https://bugzilla.gnome.org/show_bug.cgi?id=760263	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00001.html	vendor-advisory, x_refsource_APPLE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.024Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206567"
          },
          {
            "name": "90691",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90691"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "name": "APPLE-SA-2016-05-16-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206566"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=11ed4a7a90d5ce156a18980a4ad4e53e77384852"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "APPLE-SA-2016-05-16-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206564"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "1035890",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035890"
          },
          {
            "name": "APPLE-SA-2016-05-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206568"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=760263"
          },
          {
            "name": "APPLE-SA-2016-05-16-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206567"
        },
        {
          "name": "90691",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90691"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "name": "APPLE-SA-2016-05-16-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206566"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=11ed4a7a90d5ce156a18980a4ad4e53e77384852"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "APPLE-SA-2016-05-16-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206564"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "1035890",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035890"
        },
        {
          "name": "APPLE-SA-2016-05-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206568"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=760263"
        },
        {
          "name": "APPLE-SA-2016-05-16-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2016-1837",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
            },
            {
              "name": "RHSA-2016:1292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1292"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "https://support.apple.com/HT206567",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206567"
            },
            {
              "name": "90691",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90691"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "http://xmlsoft.org/news.html",
              "refsource": "CONFIRM",
              "url": "http://xmlsoft.org/news.html"
            },
            {
              "name": "APPLE-SA-2016-05-16-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "https://support.apple.com/HT206566",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206566"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "https://git.gnome.org/browse/libxml2/commit/?id=11ed4a7a90d5ce156a18980a4ad4e53e77384852",
              "refsource": "CONFIRM",
              "url": "https://git.gnome.org/browse/libxml2/commit/?id=11ed4a7a90d5ce156a18980a4ad4e53e77384852"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "APPLE-SA-2016-05-16-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
            },
            {
              "name": "https://support.apple.com/HT206564",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206564"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "1035890",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035890"
            },
            {
              "name": "APPLE-SA-2016-05-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
            },
            {
              "name": "https://support.apple.com/HT206568",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206568"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=760263",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=760263"
            },
            {
              "name": "APPLE-SA-2016-05-16-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2016-1837",
    "datePublished": "2016-05-20T10:00:00",
    "dateReserved": "2016-01-13T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.024Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1834 (GCVE-0-2016-1834)

Vulnerability from cvelistv5

Published

2016-05-20 10:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

References

URL

Tags

	https://git.gnome.org/browse/libxml2/commit/?id=8fbbf5513d609c1770b391b99e33314cd0742704	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://support.apple.com/HT206567	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90691	vdb-entry, x_refsource_BID
	https://bugzilla.gnome.org/show_bug.cgi?id=763071	x_refsource_CONFIRM
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	https://support.apple.com/HT206566	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00003.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206564	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1035890	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2016/May/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206568	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00001.html	vendor-advisory, x_refsource_APPLE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:39.960Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=8fbbf5513d609c1770b391b99e33314cd0742704"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206567"
          },
          {
            "name": "90691",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90691"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=763071"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "name": "APPLE-SA-2016-05-16-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206566"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "APPLE-SA-2016-05-16-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206564"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "1035890",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035890"
          },
          {
            "name": "APPLE-SA-2016-05-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206568"
          },
          {
            "name": "APPLE-SA-2016-05-16-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=8fbbf5513d609c1770b391b99e33314cd0742704"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206567"
        },
        {
          "name": "90691",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90691"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=763071"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "name": "APPLE-SA-2016-05-16-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206566"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "APPLE-SA-2016-05-16-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206564"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "1035890",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035890"
        },
        {
          "name": "APPLE-SA-2016-05-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206568"
        },
        {
          "name": "APPLE-SA-2016-05-16-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2016-1834",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.gnome.org/browse/libxml2/commit/?id=8fbbf5513d609c1770b391b99e33314cd0742704",
              "refsource": "CONFIRM",
              "url": "https://git.gnome.org/browse/libxml2/commit/?id=8fbbf5513d609c1770b391b99e33314cd0742704"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
            },
            {
              "name": "RHSA-2016:1292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1292"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "https://support.apple.com/HT206567",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206567"
            },
            {
              "name": "90691",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90691"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=763071",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=763071"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "http://xmlsoft.org/news.html",
              "refsource": "CONFIRM",
              "url": "http://xmlsoft.org/news.html"
            },
            {
              "name": "APPLE-SA-2016-05-16-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "https://support.apple.com/HT206566",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206566"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "APPLE-SA-2016-05-16-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
            },
            {
              "name": "https://support.apple.com/HT206564",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206564"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "1035890",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035890"
            },
            {
              "name": "APPLE-SA-2016-05-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
            },
            {
              "name": "https://support.apple.com/HT206568",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206568"
            },
            {
              "name": "APPLE-SA-2016-05-16-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2016-1834",
    "datePublished": "2016-05-20T10:00:00",
    "dateReserved": "2016-01-13T00:00:00",
    "dateUpdated": "2024-08-05T23:10:39.960Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-4448 (GCVE-0-2016-4448)

Vulnerability from cvelistv5

Published

2016-06-09 16:00

Modified

2024-08-06 00:32

Severity ?

CWE

Summary

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722	vendor-advisory, x_refsource_SLACKWARE
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/05/25/2	mailing-list, x_refsource_MLIST
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90856	vdb-entry, x_refsource_BID
	https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	https://support.apple.com/HT206901	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html	vendor-advisory, x_refsource_APPLE
	https://bugzilla.redhat.com/show_bug.cgi?id=1338700	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html	vendor-advisory, x_refsource_APPLE
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	https://support.apple.com/HT206905	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036348	vdb-entry, x_refsource_SECTRACK
	https://support.apple.com/HT206903	x_refsource_CONFIRM
	https://support.apple.com/HT206902	x_refsource_CONFIRM
	https://support.apple.com/HT206904	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709	x_refsource_CONFIRM
	https://support.apple.com/HT206899	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:32:24.779Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "SSA:2016-148-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.404722"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "name": "[oss-security] 20160525 3 libxml2 issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/25/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "90856",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90856"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9"
          },
          {
            "name": "APPLE-SA-2016-07-18-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206901"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1338700"
          },
          {
            "name": "APPLE-SA-2016-07-18-6",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206905"
          },
          {
            "name": "1036348",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036348"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206903"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206902"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206904"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206899"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "SSA:2016-148-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.404722"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "name": "[oss-security] 20160525 3 libxml2 issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/25/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "90856",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90856"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9"
        },
        {
          "name": "APPLE-SA-2016-07-18-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206901"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1338700"
        },
        {
          "name": "APPLE-SA-2016-07-18-6",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206905"
        },
        {
          "name": "1036348",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036348"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206903"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206902"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206904"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206899"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-4448",
    "datePublished": "2016-06-09T16:00:00",
    "dateReserved": "2016-05-02T00:00:00",
    "dateUpdated": "2024-08-06T00:32:24.779Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1838 (GCVE-0-2016-1838)

Vulnerability from cvelistv5

Published

2016-05-20 10:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://support.apple.com/HT206567	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90691	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.gnome.org/show_bug.cgi?id=758588	x_refsource_CONFIRM
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=db07dd613e461df93dde7902c6505629bf0734e9	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	https://bugs.chromium.org/p/project-zero/issues/detail?id=639	x_refsource_MISC
	https://support.apple.com/HT206566	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00003.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206564	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1035890	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2016/May/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206568	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00001.html	vendor-advisory, x_refsource_APPLE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.042Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206567"
          },
          {
            "name": "90691",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90691"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=758588"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=db07dd613e461df93dde7902c6505629bf0734e9"
          },
          {
            "name": "APPLE-SA-2016-05-16-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=639"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206566"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "APPLE-SA-2016-05-16-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206564"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201701-37",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-37"
          },
          {
            "name": "1035890",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035890"
          },
          {
            "name": "APPLE-SA-2016-05-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206568"
          },
          {
            "name": "APPLE-SA-2016-05-16-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206567"
        },
        {
          "name": "90691",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90691"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=758588"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=db07dd613e461df93dde7902c6505629bf0734e9"
        },
        {
          "name": "APPLE-SA-2016-05-16-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=639"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206566"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "APPLE-SA-2016-05-16-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206564"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201701-37",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-37"
        },
        {
          "name": "1035890",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035890"
        },
        {
          "name": "APPLE-SA-2016-05-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206568"
        },
        {
          "name": "APPLE-SA-2016-05-16-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2016-1838",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
            },
            {
              "name": "RHSA-2016:1292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1292"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "https://support.apple.com/HT206567",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206567"
            },
            {
              "name": "90691",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90691"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=758588",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=758588"
            },
            {
              "name": "http://xmlsoft.org/news.html",
              "refsource": "CONFIRM",
              "url": "http://xmlsoft.org/news.html"
            },
            {
              "name": "https://git.gnome.org/browse/libxml2/commit/?id=db07dd613e461df93dde7902c6505629bf0734e9",
              "refsource": "CONFIRM",
              "url": "https://git.gnome.org/browse/libxml2/commit/?id=db07dd613e461df93dde7902c6505629bf0734e9"
            },
            {
              "name": "APPLE-SA-2016-05-16-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "https://bugs.chromium.org/p/project-zero/issues/detail?id=639",
              "refsource": "MISC",
              "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=639"
            },
            {
              "name": "https://support.apple.com/HT206566",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206566"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "APPLE-SA-2016-05-16-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
            },
            {
              "name": "https://support.apple.com/HT206564",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206564"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "GLSA-201701-37",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-37"
            },
            {
              "name": "1035890",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035890"
            },
            {
              "name": "APPLE-SA-2016-05-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
            },
            {
              "name": "https://support.apple.com/HT206568",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206568"
            },
            {
              "name": "APPLE-SA-2016-05-16-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2016-1838",
    "datePublished": "2016-05-20T10:00:00",
    "dateReserved": "2016-01-13T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.042Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2073 (GCVE-0-2016-2073)

Vulnerability from cvelistv5

Published

2016-02-12 15:26

Modified

2024-08-05 23:17

Severity ?

CWE

Summary

The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document.

References

URL

Tags

	http://www.securitytracker.com/id/1035011	vdb-entry, x_refsource_SECTRACK
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/01/26/7	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/01/25/6	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/85267	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.386Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1035011",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035011"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "[oss-security] 20160126 Re: Out-of-bounds Read in the libxml2\u0027s htmlParseNameComplex() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/01/26/7"
          },
          {
            "name": "GLSA-201701-37",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-37"
          },
          {
            "name": "[oss-security] 20160125 Out-of-bounds Read in the libxml2\u0027s htmlParseNameComplex() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/01/25/6"
          },
          {
            "name": "85267",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/85267"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-01-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1035011",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035011"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "[oss-security] 20160126 Re: Out-of-bounds Read in the libxml2\u0027s htmlParseNameComplex() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/01/26/7"
        },
        {
          "name": "GLSA-201701-37",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-37"
        },
        {
          "name": "[oss-security] 20160125 Out-of-bounds Read in the libxml2\u0027s htmlParseNameComplex() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/01/25/6"
        },
        {
          "name": "85267",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/85267"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-2073",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1035011",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035011"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "[oss-security] 20160126 Re: Out-of-bounds Read in the libxml2\u0027s htmlParseNameComplex() function",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/01/26/7"
            },
            {
              "name": "GLSA-201701-37",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-37"
            },
            {
              "name": "[oss-security] 20160125 Out-of-bounds Read in the libxml2\u0027s htmlParseNameComplex() function",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/01/25/6"
            },
            {
              "name": "85267",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/85267"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-2073",
    "datePublished": "2016-02-12T15:26:00",
    "dateReserved": "2016-01-26T00:00:00",
    "dateUpdated": "2024-08-05T23:17:50.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1839 (GCVE-0-2016-1839)

Vulnerability from cvelistv5

Published

2016-05-20 10:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.gnome.org/show_bug.cgi?id=758605	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://support.apple.com/HT206567	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90691	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	https://support.apple.com/HT206566	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=a820dbeac29d330bae4be05d9ecd939ad6b4aa33	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00003.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206564	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1035890	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2016/May/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://www.securitytracker.com/id/1038623	vdb-entry, x_refsource_SECTRACK
	https://support.apple.com/HT206568	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00001.html	vendor-advisory, x_refsource_APPLE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:39.919Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=758605"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206567"
          },
          {
            "name": "90691",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90691"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "name": "APPLE-SA-2016-05-16-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206566"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=a820dbeac29d330bae4be05d9ecd939ad6b4aa33"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "APPLE-SA-2016-05-16-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206564"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201701-37",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-37"
          },
          {
            "name": "1035890",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035890"
          },
          {
            "name": "APPLE-SA-2016-05-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
          },
          {
            "name": "1038623",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038623"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206568"
          },
          {
            "name": "APPLE-SA-2016-05-16-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=758605"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206567"
        },
        {
          "name": "90691",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90691"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "name": "APPLE-SA-2016-05-16-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206566"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=a820dbeac29d330bae4be05d9ecd939ad6b4aa33"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "APPLE-SA-2016-05-16-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206564"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201701-37",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-37"
        },
        {
          "name": "1035890",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035890"
        },
        {
          "name": "APPLE-SA-2016-05-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
        },
        {
          "name": "1038623",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038623"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206568"
        },
        {
          "name": "APPLE-SA-2016-05-16-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2016-1839",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
            },
            {
              "name": "RHSA-2016:1292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1292"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=758605",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=758605"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "https://support.apple.com/HT206567",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206567"
            },
            {
              "name": "90691",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90691"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "http://xmlsoft.org/news.html",
              "refsource": "CONFIRM",
              "url": "http://xmlsoft.org/news.html"
            },
            {
              "name": "APPLE-SA-2016-05-16-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "https://support.apple.com/HT206566",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206566"
            },
            {
              "name": "https://git.gnome.org/browse/libxml2/commit/?id=a820dbeac29d330bae4be05d9ecd939ad6b4aa33",
              "refsource": "CONFIRM",
              "url": "https://git.gnome.org/browse/libxml2/commit/?id=a820dbeac29d330bae4be05d9ecd939ad6b4aa33"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "APPLE-SA-2016-05-16-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
            },
            {
              "name": "https://support.apple.com/HT206564",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206564"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "GLSA-201701-37",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-37"
            },
            {
              "name": "1035890",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035890"
            },
            {
              "name": "APPLE-SA-2016-05-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
            },
            {
              "name": "1038623",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038623"
            },
            {
              "name": "https://support.apple.com/HT206568",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206568"
            },
            {
              "name": "APPLE-SA-2016-05-16-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2016-1839",
    "datePublished": "2016-05-20T10:00:00",
    "dateReserved": "2016-01-13T00:00:00",
    "dateUpdated": "2024-08-05T23:10:39.919Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-3705 (GCVE-0-2016-3705)

Vulnerability from cvelistv5

Published

2016-05-17 14:00

Modified

2024-08-06 00:03

Severity ?

CWE

Summary

The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references.

References

URL

Tags

	http://seclists.org/fulldisclosure/2016/May/10	mailing-list, x_refsource_FULLDISC
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	https://bugzilla.gnome.org/show_bug.cgi?id=765207	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/89854	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.486Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20160503 CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser)",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2016/May/10"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "openSUSE-SU-2016:1446",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html"
          },
          {
            "name": "openSUSE-SU-2016:1298",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=765207"
          },
          {
            "name": "89854",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/89854"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201701-37",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-37"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20160503 CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser)",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2016/May/10"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "openSUSE-SU-2016:1446",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html"
        },
        {
          "name": "openSUSE-SU-2016:1298",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=765207"
        },
        {
          "name": "89854",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/89854"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201701-37",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-37"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-3705",
    "datePublished": "2016-05-17T14:00:00",
    "dateReserved": "2016-03-30T00:00:00",
    "dateUpdated": "2024-08-06T00:03:34.486Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1835 (GCVE-0-2016-1835)

Vulnerability from cvelistv5

Published

2016-05-20 10:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://support.apple.com/HT206567	x_refsource_CONFIRM
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00004.html	vendor-advisory, x_refsource_APPLE
	https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90696	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1035890	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2016/May/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://bugzilla.gnome.org/show_bug.cgi?id=759020	x_refsource_CONFIRM
	https://support.apple.com/HT206568	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:39.633Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206567"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "name": "APPLE-SA-2016-05-16-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb"
          },
          {
            "name": "90696",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90696"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "1035890",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035890"
          },
          {
            "name": "APPLE-SA-2016-05-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=759020"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206568"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206567"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "name": "APPLE-SA-2016-05-16-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb"
        },
        {
          "name": "90696",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90696"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "1035890",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035890"
        },
        {
          "name": "APPLE-SA-2016-05-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=759020"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206568"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2016-1835",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
            },
            {
              "name": "RHSA-2016:1292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1292"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "https://support.apple.com/HT206567",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206567"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "http://xmlsoft.org/news.html",
              "refsource": "CONFIRM",
              "url": "http://xmlsoft.org/news.html"
            },
            {
              "name": "APPLE-SA-2016-05-16-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
            },
            {
              "name": "https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb",
              "refsource": "CONFIRM",
              "url": "https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb"
            },
            {
              "name": "90696",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90696"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "1035890",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035890"
            },
            {
              "name": "APPLE-SA-2016-05-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=759020",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=759020"
            },
            {
              "name": "https://support.apple.com/HT206568",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206568"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2016-1835",
    "datePublished": "2016-05-20T10:00:00",
    "dateReserved": "2016-01-13T00:00:00",
    "dateUpdated": "2024-08-05T23:10:39.633Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1762 (GCVE-0-2016-1762)

Vulnerability from cvelistv5

Published

2016-03-24 01:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206167	x_refsource_CONFIRM
	https://support.apple.com/HT206168	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html	vendor-advisory, x_refsource_APPLE
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1035353	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	https://bugzilla.gnome.org/show_bug.cgi?id=759671	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	https://git.gnome.org/browse/libxml2/commit/?id=a7a94612aa3b16779e2c74e1fa353b5d9786c602	x_refsource_CONFIRM
	https://support.apple.com/HT206171	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206169	x_refsource_CONFIRM
	https://support.apple.com/HT206166	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/85059	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:38.984Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "APPLE-SA-2016-03-21-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206167"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206168"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "name": "APPLE-SA-2016-03-21-6",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "name": "1035353",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035353"
          },
          {
            "name": "APPLE-SA-2016-03-21-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=759671"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "name": "APPLE-SA-2016-03-21-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=a7a94612aa3b16779e2c74e1fa353b5d9786c602"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206171"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "APPLE-SA-2016-03-21-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206169"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206166"
          },
          {
            "name": "85059",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/85059"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "APPLE-SA-2016-03-21-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206167"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206168"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "name": "APPLE-SA-2016-03-21-6",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "name": "1035353",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035353"
        },
        {
          "name": "APPLE-SA-2016-03-21-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=759671"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "name": "APPLE-SA-2016-03-21-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=a7a94612aa3b16779e2c74e1fa353b5d9786c602"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206171"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "APPLE-SA-2016-03-21-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206169"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206166"
        },
        {
          "name": "85059",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/85059"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2016-1762",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
            },
            {
              "name": "APPLE-SA-2016-03-21-5",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html"
            },
            {
              "name": "https://support.apple.com/HT206167",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206167"
            },
            {
              "name": "https://support.apple.com/HT206168",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206168"
            },
            {
              "name": "RHSA-2016:1292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1292"
            },
            {
              "name": "APPLE-SA-2016-03-21-6",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "1035353",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035353"
            },
            {
              "name": "APPLE-SA-2016-03-21-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html"
            },
            {
              "name": "http://xmlsoft.org/news.html",
              "refsource": "CONFIRM",
              "url": "http://xmlsoft.org/news.html"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=759671",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=759671"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "APPLE-SA-2016-03-21-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html"
            },
            {
              "name": "https://git.gnome.org/browse/libxml2/commit/?id=a7a94612aa3b16779e2c74e1fa353b5d9786c602",
              "refsource": "CONFIRM",
              "url": "https://git.gnome.org/browse/libxml2/commit/?id=a7a94612aa3b16779e2c74e1fa353b5d9786c602"
            },
            {
              "name": "https://support.apple.com/HT206171",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206171"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "APPLE-SA-2016-03-21-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html"
            },
            {
              "name": "https://support.apple.com/HT206169",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206169"
            },
            {
              "name": "https://support.apple.com/HT206166",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206166"
            },
            {
              "name": "85059",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/85059"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2016-1762",
    "datePublished": "2016-03-24T01:00:00",
    "dateReserved": "2016-01-13T00:00:00",
    "dateUpdated": "2024-08-05T23:10:38.984Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1840 (GCVE-0-2016-1840)

Vulnerability from cvelistv5

Published

2016-05-20 10:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://support.apple.com/HT206567	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90691	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.gnome.org/show_bug.cgi?id=757711	x_refsource_CONFIRM
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	https://support.apple.com/HT206566	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00003.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206564	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1035890	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2016/May/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206568	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00001.html	vendor-advisory, x_refsource_APPLE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:40.187Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206567"
          },
          {
            "name": "90691",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90691"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=757711"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "name": "APPLE-SA-2016-05-16-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206566"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "APPLE-SA-2016-05-16-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206564"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201701-37",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-37"
          },
          {
            "name": "1035890",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035890"
          },
          {
            "name": "APPLE-SA-2016-05-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206568"
          },
          {
            "name": "APPLE-SA-2016-05-16-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206567"
        },
        {
          "name": "90691",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90691"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=757711"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "name": "APPLE-SA-2016-05-16-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206566"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "APPLE-SA-2016-05-16-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206564"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201701-37",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-37"
        },
        {
          "name": "1035890",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035890"
        },
        {
          "name": "APPLE-SA-2016-05-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206568"
        },
        {
          "name": "APPLE-SA-2016-05-16-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2016-1840",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
            },
            {
              "name": "RHSA-2016:1292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1292"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "https://support.apple.com/HT206567",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206567"
            },
            {
              "name": "90691",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90691"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=757711",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=757711"
            },
            {
              "name": "http://xmlsoft.org/news.html",
              "refsource": "CONFIRM",
              "url": "http://xmlsoft.org/news.html"
            },
            {
              "name": "APPLE-SA-2016-05-16-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "https://support.apple.com/HT206566",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206566"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "APPLE-SA-2016-05-16-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
            },
            {
              "name": "https://support.apple.com/HT206564",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206564"
            },
            {
              "name": "https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4",
              "refsource": "CONFIRM",
              "url": "https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "GLSA-201701-37",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-37"
            },
            {
              "name": "1035890",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035890"
            },
            {
              "name": "APPLE-SA-2016-05-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
            },
            {
              "name": "https://support.apple.com/HT206568",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206568"
            },
            {
              "name": "APPLE-SA-2016-05-16-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2016-1840",
    "datePublished": "2016-05-20T10:00:00",
    "dateReserved": "2016-01-13T00:00:00",
    "dateUpdated": "2024-08-05T23:10:40.187Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-4449 (GCVE-0-2016-4449)

Vulnerability from cvelistv5

Published

2016-06-09 16:00

Modified

2024-08-06 00:32

Severity ?

CWE

Summary

XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://support.cybozu.com/ja-jp/article/9735	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722	vendor-advisory, x_refsource_SLACKWARE
	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	x_refsource_CONFIRM
	http://jvn.jp/en/jp/JVN17535578/index.html	third-party-advisory, x_refsource_JVN
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/05/25/2	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	https://support.apple.com/HT206901	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000066.html	third-party-advisory, x_refsource_JVNDB
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html	vendor-advisory, x_refsource_APPLE
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90865	vdb-entry, x_refsource_BID
	https://git.gnome.org/browse/libxml2/commit/?id=b1d34de46a11323fccffa9fadeb33be670d602f5	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	https://support.apple.com/HT206905	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036348	vdb-entry, x_refsource_SECTRACK
	https://support.apple.com/HT206903	x_refsource_CONFIRM
	https://support.apple.com/HT206902	x_refsource_CONFIRM
	https://support.apple.com/HT206904	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709	x_refsource_CONFIRM
	https://support.apple.com/HT206899	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:32:25.361Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/9735"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "SSA:2016-148-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.404722"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
          },
          {
            "name": "JVN#17535578",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN17535578/index.html"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "name": "[oss-security] 20160525 3 libxml2 issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/25/2"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "name": "APPLE-SA-2016-07-18-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206901"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html"
          },
          {
            "name": "JVNDB-2017-000066",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000066.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-6",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "90865",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90865"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=b1d34de46a11323fccffa9fadeb33be670d602f5"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206905"
          },
          {
            "name": "1036348",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036348"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206903"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206902"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206904"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206899"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-18T01:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/9735"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "SSA:2016-148-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.404722"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
        },
        {
          "name": "JVN#17535578",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN17535578/index.html"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "name": "[oss-security] 20160525 3 libxml2 issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/25/2"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "name": "APPLE-SA-2016-07-18-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206901"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html"
        },
        {
          "name": "JVNDB-2017-000066",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000066.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-6",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "90865",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90865"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=b1d34de46a11323fccffa9fadeb33be670d602f5"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206905"
        },
        {
          "name": "1036348",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036348"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206903"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206902"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206904"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206899"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-4449",
    "datePublished": "2016-06-09T16:00:00",
    "dateReserved": "2016-05-02T00:00:00",
    "dateUpdated": "2024-08-06T00:32:25.361Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-4447 (GCVE-0-2016-4447)

Vulnerability from cvelistv5

Published

2016-06-09 16:00

Modified

2024-08-06 00:32

Severity ?

CWE

Summary

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722	vendor-advisory, x_refsource_SLACKWARE
	http://www.securityfocus.com/bid/90864	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/05/25/2	mailing-list, x_refsource_MLIST
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	https://support.apple.com/HT206901	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html	vendor-advisory, x_refsource_APPLE
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	https://support.apple.com/HT206905	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036348	vdb-entry, x_refsource_SECTRACK
	https://support.apple.com/HT206903	x_refsource_CONFIRM
	https://support.apple.com/HT206902	x_refsource_CONFIRM
	https://support.apple.com/HT206904	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709	x_refsource_CONFIRM
	https://support.apple.com/HT206899	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:32:25.110Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "SSA:2016-148-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.404722"
          },
          {
            "name": "90864",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90864"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "name": "[oss-security] 20160525 3 libxml2 issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/25/2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "name": "APPLE-SA-2016-07-18-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206901"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83"
          },
          {
            "name": "APPLE-SA-2016-07-18-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html"
          },
          {
            "name": "APPLE-SA-2016-07-18-6",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206905"
          },
          {
            "name": "1036348",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036348"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206903"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206902"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206904"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206899"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "SSA:2016-148-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.404722"
        },
        {
          "name": "90864",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90864"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "name": "[oss-security] 20160525 3 libxml2 issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/25/2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "name": "APPLE-SA-2016-07-18-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206901"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83"
        },
        {
          "name": "APPLE-SA-2016-07-18-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html"
        },
        {
          "name": "APPLE-SA-2016-07-18-6",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206905"
        },
        {
          "name": "1036348",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036348"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206903"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206902"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206904"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206899"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-4447",
    "datePublished": "2016-06-09T16:00:00",
    "dateReserved": "2016-05-02T00:00:00",
    "dateUpdated": "2024-08-06T00:32:25.110Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-4483 (GCVE-0-2016-4483)

Vulnerability from cvelistv5

Published

2017-04-11 16:00

Modified

2024-08-06 00:32

Severity ?

CWE

Summary

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.

References

URL

Tags

	http://www.openwall.com/lists/oss-security/2016/05/03/8	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/05/04/7	mailing-list, x_refsource_MLIST
	https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/06/07/5	mailing-list, x_refsource_MLIST
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90013	vdb-entry, x_refsource_BID
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2016/06/07/4	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1036348	vdb-entry, x_refsource_SECTRACK
	https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:32:25.437Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20160503 CVE request: out-of-bounds read parsing an XML in libxml2 using recover mode",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/03/8"
          },
          {
            "name": "[oss-security] 20160504 Re: CVE request: out-of-bounds read parsing an XML in libxml2 using recover mode",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/04/7"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd"
          },
          {
            "name": "[oss-security] 20160607 Re: Please reject duplicate CVE for libxml2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/07/5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "90013",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90013"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3593"
          },
          {
            "name": "[oss-security] 20160607 Please reject duplicate CVE for libxml2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/07/4"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201701-37",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-37"
          },
          {
            "name": "1036348",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036348"
          },
          {
            "name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"
          },
          {
            "name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-29T14:07:35",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20160503 CVE request: out-of-bounds read parsing an XML in libxml2 using recover mode",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/03/8"
        },
        {
          "name": "[oss-security] 20160504 Re: CVE request: out-of-bounds read parsing an XML in libxml2 using recover mode",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/04/7"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd"
        },
        {
          "name": "[oss-security] 20160607 Re: Please reject duplicate CVE for libxml2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/07/5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "90013",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90013"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3593"
        },
        {
          "name": "[oss-security] 20160607 Please reject duplicate CVE for libxml2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/07/4"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201701-37",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-37"
        },
        {
          "name": "1036348",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036348"
        },
        {
          "name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"
        },
        {
          "name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-4483",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20160503 CVE request: out-of-bounds read parsing an XML in libxml2 using recover mode",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/03/8"
            },
            {
              "name": "[oss-security] 20160504 Re: CVE request: out-of-bounds read parsing an XML in libxml2 using recover mode",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/05/04/7"
            },
            {
              "name": "https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd",
              "refsource": "CONFIRM",
              "url": "https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd"
            },
            {
              "name": "[oss-security] 20160607 Re: Please reject duplicate CVE for libxml2",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/07/5"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "90013",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90013"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "[oss-security] 20160607 Please reject duplicate CVE for libxml2",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/07/4"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "GLSA-201701-37",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-37"
            },
            {
              "name": "1036348",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036348"
            },
            {
              "name": "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"
            },
            {
              "name": "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-4483",
    "datePublished": "2017-04-11T16:00:00",
    "dateReserved": "2016-05-04T00:00:00",
    "dateUpdated": "2024-08-06T00:32:25.437Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-8806 (GCVE-0-2015-8806)

Vulnerability from cvelistv5

Published

2016-04-13 17:00

Modified

2024-08-06 08:29

Severity ?

CWE

Summary

dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.

References

URL

Tags

	https://bugzilla.gnome.org/show_bug.cgi?id=749115	x_refsource_MISC
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/02/03/5	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/82071	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:29:22.040Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=749115"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "name": "[oss-security] 20160203 Re: Out-of-bounds Read in the libxml2\u0027s htmlParseNameComplex() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/02/03/5"
          },
          {
            "name": "GLSA-201701-37",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-37"
          },
          {
            "name": "82071",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/82071"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-02-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the \"\u003c!DOCTYPE html\" substring in a crafted HTML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=749115"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "name": "[oss-security] 20160203 Re: Out-of-bounds Read in the libxml2\u0027s htmlParseNameComplex() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/02/03/5"
        },
        {
          "name": "GLSA-201701-37",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-37"
        },
        {
          "name": "82071",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/82071"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2015-8806",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the \"\u003c!DOCTYPE html\" substring in a crafted HTML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=749115",
              "refsource": "MISC",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=749115"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "[oss-security] 20160203 Re: Out-of-bounds Read in the libxml2\u0027s htmlParseNameComplex() function",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/02/03/5"
            },
            {
              "name": "GLSA-201701-37",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-37"
            },
            {
              "name": "82071",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/82071"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2015-8806",
    "datePublished": "2016-04-13T17:00:00",
    "dateReserved": "2016-02-03T00:00:00",
    "dateUpdated": "2024-08-06T08:29:22.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-1833 (GCVE-0-2016-1833)

Vulnerability from cvelistv5

Published

2016-05-20 10:00

Modified

2024-08-05 23:10

Severity ?

CWE

Summary

The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

References

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://support.apple.com/HT206567	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90691	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	https://bugs.chromium.org/p/project-zero/issues/detail?id=636	x_refsource_MISC
	http://xmlsoft.org/news.html	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	https://support.apple.com/HT206566	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	https://bugzilla.gnome.org/show_bug.cgi?id=758606	x_refsource_CONFIRM
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00003.html	vendor-advisory, x_refsource_APPLE
	https://support.apple.com/HT206564	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1035890	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2016/May/msg00002.html	vendor-advisory, x_refsource_APPLE
	https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76	x_refsource_CONFIRM
	https://support.apple.com/HT206568	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2016/May/msg00001.html	vendor-advisory, x_refsource_APPLE

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:10:39.300Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
          },
          {
            "name": "RHSA-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2016:1292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206567"
          },
          {
            "name": "90691",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90691"
          },
          {
            "name": "DSA-3593",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2016/dsa-3593"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=636"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xmlsoft.org/news.html"
          },
          {
            "name": "APPLE-SA-2016-05-16-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
          },
          {
            "name": "USN-2994-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2994-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206566"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.gnome.org/show_bug.cgi?id=758606"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2016-18"
          },
          {
            "name": "APPLE-SA-2016-05-16-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206564"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "1035890",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035890"
          },
          {
            "name": "APPLE-SA-2016-05-16-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/HT206568"
          },
          {
            "name": "APPLE-SA-2016-05-16-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
        },
        {
          "name": "RHSA-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2016:1292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206567"
        },
        {
          "name": "90691",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90691"
        },
        {
          "name": "DSA-3593",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2016/dsa-3593"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=636"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xmlsoft.org/news.html"
        },
        {
          "name": "APPLE-SA-2016-05-16-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
        },
        {
          "name": "USN-2994-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2994-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206566"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.gnome.org/show_bug.cgi?id=758606"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/tns-2016-18"
        },
        {
          "name": "APPLE-SA-2016-05-16-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206564"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "1035890",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035890"
        },
        {
          "name": "APPLE-SA-2016-05-16-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/HT206568"
        },
        {
          "name": "APPLE-SA-2016-05-16-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2016-1833",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10170"
            },
            {
              "name": "RHSA-2016:1292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2016:1292"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "https://support.apple.com/HT206567",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206567"
            },
            {
              "name": "90691",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/90691"
            },
            {
              "name": "DSA-3593",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2016/dsa-3593"
            },
            {
              "name": "https://bugs.chromium.org/p/project-zero/issues/detail?id=636",
              "refsource": "MISC",
              "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=636"
            },
            {
              "name": "http://xmlsoft.org/news.html",
              "refsource": "CONFIRM",
              "url": "http://xmlsoft.org/news.html"
            },
            {
              "name": "APPLE-SA-2016-05-16-4",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00004.html"
            },
            {
              "name": "USN-2994-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2994-1"
            },
            {
              "name": "https://support.apple.com/HT206566",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206566"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html"
            },
            {
              "name": "https://bugzilla.gnome.org/show_bug.cgi?id=758606",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.gnome.org/show_bug.cgi?id=758606"
            },
            {
              "name": "https://www.tenable.com/security/tns-2016-18",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/tns-2016-18"
            },
            {
              "name": "APPLE-SA-2016-05-16-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00003.html"
            },
            {
              "name": "https://support.apple.com/HT206564",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206564"
            },
            {
              "name": "RHSA-2016:2957",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
            },
            {
              "name": "1035890",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035890"
            },
            {
              "name": "APPLE-SA-2016-05-16-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00002.html"
            },
            {
              "name": "https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76",
              "refsource": "CONFIRM",
              "url": "https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76"
            },
            {
              "name": "https://support.apple.com/HT206568",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/HT206568"
            },
            {
              "name": "APPLE-SA-2016-05-16-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2016/May/msg00001.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2016-1833",
    "datePublished": "2016-05-20T10:00:00",
    "dateReserved": "2016-01-13T00:00:00",
    "dateUpdated": "2024-08-05T23:10:39.300Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2016:1538-1

Vulnerability from csaf_suse

CVE-2016-1837 (GCVE-0-2016-1837)

Vulnerability from cvelistv5

CVE-2016-1834 (GCVE-0-2016-1834)

Vulnerability from cvelistv5

CVE-2016-4448 (GCVE-0-2016-4448)

Vulnerability from cvelistv5

CVE-2016-1838 (GCVE-0-2016-1838)

Vulnerability from cvelistv5

CVE-2016-2073 (GCVE-0-2016-2073)

Vulnerability from cvelistv5

CVE-2016-1839 (GCVE-0-2016-1839)

Vulnerability from cvelistv5

CVE-2016-3705 (GCVE-0-2016-3705)

Vulnerability from cvelistv5

CVE-2016-1835 (GCVE-0-2016-1835)

Vulnerability from cvelistv5

CVE-2016-1762 (GCVE-0-2016-1762)

Vulnerability from cvelistv5

CVE-2016-1840 (GCVE-0-2016-1840)

Vulnerability from cvelistv5

CVE-2016-4449 (GCVE-0-2016-4449)

Vulnerability from cvelistv5

CVE-2016-4447 (GCVE-0-2016-4447)

Vulnerability from cvelistv5

CVE-2016-4483 (GCVE-0-2016-4483)

Vulnerability from cvelistv5

CVE-2015-8806 (GCVE-0-2015-8806)

Vulnerability from cvelistv5

CVE-2016-1833 (GCVE-0-2016-1833)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature