p PatchFirst

CVE-2016-4472

CVE-2016-4472

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.

CVSS 8.1 · High · EPSS 11.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • expat Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.1.1-2

    Update to 2.1.1-2

  • expat Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.1.1-2

    Update to 2.1.1-2

  • expat Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.1.1-2

    Update to 2.1.1-2

  • libxmltok Debian:12

    Versions
    • 1.2-4
    • 1.2-4.1
    • 1.2-4.1~exp1
    • 1.2-4.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • coin3 Ubuntu:Pro:14.04:LTS

    Versions
    • 3.1.4~abc9f50-3
    • 3.1.4~abc9f50-4
    • 3.1.4~abc9f50-4ubuntu2
    • 3.1.4~abc9f50-4ubuntu2+esm1
    • 3.1.4~abc9f50-4ubuntu2+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vnc4 Ubuntu:Pro:14.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37ubuntu5
    • 4.1.1+xorg4.3.0-37ubuntu5.0.1
    • 4.1.1+xorg4.3.0-37ubuntu5.0.2
    • 4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:14.04:LTS

    Versions
    • 1.16.33-3.2ubuntu3
    • 1.33.06-0ubuntu1
    • 1.33.06-0ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxmltok Ubuntu:Pro:16.04:LTS

    Versions
    • 1.2-3build3
    • 1.2-3ubuntu0.16.04.1~esm1
    Affected ranges
    • ECOSYSTEM: < 1.2-3ubuntu0.16.04.1~esm2

    Update to 1.2-3ubuntu0.16.04.1~esm2

  • ayttm Ubuntu:Pro:16.04:LTS

    Versions
    • 0.6.3-3build1
    • 0.6.3-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cableswig Ubuntu:Pro:16.04:LTS

    Versions
    • 0.1.0+git20150808-1
    • 0.1.0+git20150808-2
    • 0.1.0+git20150808-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cadaver Ubuntu:16.04:LTS

    Versions
    • 0.23.3-2ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • coin3 Ubuntu:Pro:16.04:LTS

    Versions
    • 3.1.4~abc9f50+dfsg1-1
    • 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1
    • 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • insighttoolkit Ubuntu:Pro:16.04:LTS

    Versions
    • 3.20.1+git20120521-6
    • 3.20.1+git20120521-6build1
    • 3.20.1+git20120521-6ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matanza Ubuntu:16.04:LTS

    Versions
    • 0.13+ds1-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swish-e Ubuntu:Pro:16.04:LTS

    Versions
    • 2.4.7-4
    • 2.4.7-4build1
    • 2.4.7-4ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vnc4 Ubuntu:Pro:16.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37.3ubuntu2
    • 4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:16.04:LTS

    Versions
    • 1.33.14-0.2ubuntu3
    • 1.33.14-1ubuntu1
    • 1.33.14-1ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cadaver Ubuntu:18.04:LTS

    Versions
    • 0.23.3-2ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • coin3 Ubuntu:Pro:18.04:LTS

    Versions
    • 3.1.4~abc9f50+dfsg1-2
    • 3.1.4~abc9f50+dfsg2-1
    • 3.1.4~abc9f50+dfsg3-1
    • 3.1.4~abc9f50+dfsg3-2
    • 3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libxmltok Ubuntu:Pro:18.04:LTS

    Versions
    • 1.2-4
    • 1.2-4ubuntu0.18.04.1~esm1
    • 1.2-4ubuntu0.18.04.1~esm2
    • 1.2-4ubuntu0.18.04.1~esm3
    Affected ranges
    • ECOSYSTEM: < 1.2-4ubuntu0.18.04.1~esm4

    Update to 1.2-4ubuntu0.18.04.1~esm4

  • matanza Ubuntu:18.04:LTS

    Versions
    • 0.13+ds1-5build1
    • 0.13+ds1-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swish-e Ubuntu:Pro:18.04:LTS

    Versions
    • 2.4.7-5ubuntu1
    • 2.4.7-5ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vnc4 Ubuntu:18.04:LTS

    Versions
    • 4.1.1+xorg4.3.0-37.3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →