CVE-2016-4472
High · 8.1CVSS
8.1
EPSS
11.9%
Published
Jun 30, 2016
CISA due date
—
The record
The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.4 | expat | 0 | 2.1.1-r2 |
| Debian:11 | expat | 0 | 2.1.1-2 |
| Debian:11 | libxmltok | 0 | No fix |
| Debian:12 | expat | 0 | 2.1.1-2 |
| Debian:12 | libxmltok | 0 | No fix |
| Debian:13 | expat | 0 | 2.1.1-2 |
| Debian:7 | expat | 0 | 2.1.0-1+deb7u3 |
| Debian:8 | expat | 0 | 2.1.0-6+deb8u2 |
| SUSE:Enterprise Storage 5 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Enterprise Storage 5 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:HPE Helion OpenStack 8 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:HPE Helion OpenStack 8 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Desktop 12 SP4 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Desktop 12 SP4 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Module for Web and Scripting 12 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Module for Web and Scripting 12 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server 12 SP4 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server 12 SP4 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server 12 SP5 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server 12 SP5 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:OpenStack Cloud 7 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:OpenStack Cloud 7 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:OpenStack Cloud 8 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:OpenStack Cloud 8 | python3-base | 0 | 3.4.10-25.39.2 |
| SUSE:OpenStack Cloud Crowbar 8 | python3 | 0 | 3.4.10-25.39.3 |
| SUSE:OpenStack Cloud Crowbar 8 | python3-base | 0 | 3.4.10-25.39.2 |
| Ubuntu:14.04:LTS | expat | 0 | 2.1.0-4ubuntu1.2 |
| Ubuntu:14.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:16.04:LTS | ayttm | 0 | No fix |
| Ubuntu:16.04:LTS | cableswig | 0 | No fix |
| Ubuntu:16.04:LTS | cadaver | 0 | No fix |
| Ubuntu:16.04:LTS | expat | 0 | 2.1.0-7ubuntu0.16.04.1 |
| Ubuntu:16.04:LTS | insighttoolkit | 0 | No fix |
| Ubuntu:16.04:LTS | matanza | 0 | No fix |
| Ubuntu:16.04:LTS | swish-e | 0 | No fix |
| Ubuntu:16.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:18.04:LTS | cadaver | 0 | No fix |
| Ubuntu:18.04:LTS | coin3 | 0 | No fix |
| Ubuntu:18.04:LTS | matanza | 0 | No fix |
| Ubuntu:18.04:LTS | swish-e | 0 | No fix |
| Ubuntu:18.04:LTS | vnc4 | 0 | No fix |
| Ubuntu:18.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:20.04:LTS | cadaver | 0 | No fix |
| Ubuntu:20.04:LTS | coin3 | 0 | No fix |
| Ubuntu:20.04:LTS | libxmltok | 0 | No fix |
| Ubuntu:20.04:LTS | matanza | 0 | No fix |
| Ubuntu:20.04:LTS | swish-e | 0 | No fix |
| Ubuntu:20.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:22.04:LTS | cadaver | 0 | No fix |
| Ubuntu:22.04:LTS | coin3 | 0 | No fix |
| Ubuntu:22.04:LTS | libxmltok | 0 | No fix |
| Ubuntu:22.04:LTS | matanza | 0 | No fix |
| Ubuntu:22.04:LTS | swish-e | 0 | No fix |
| Ubuntu:22.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:24.04:LTS | audacity | 0 | No fix |
| Ubuntu:24.04:LTS | cadaver | 0 | No fix |
| Ubuntu:24.04:LTS | coin3 | 0 | No fix |
| Ubuntu:24.04:LTS | libxmltok | 0 | No fix |
| Ubuntu:24.04:LTS | matanza | 0 | No fix |
| Ubuntu:24.04:LTS | swish-e | 0 | No fix |
| Ubuntu:24.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:24.10 | audacity | 0 | No fix |
| Ubuntu:24.10 | cadaver | 0 | No fix |
| Ubuntu:24.10 | coin3 | 0 | No fix |
| Ubuntu:24.10 | libxmltok | 0 | No fix |
| Ubuntu:24.10 | libxmltok | 0 | 1.2-4.1ubuntu3.1 |
| Ubuntu:24.10 | matanza | 0 | No fix |
| Ubuntu:24.10 | sitecopy | 0 | No fix |
| Ubuntu:24.10 | swish-e | 0 | No fix |
| Ubuntu:24.10 | xmlrpc-c | 0 | No fix |
| Ubuntu:25.04 | cadaver | 0 | No fix |
| Ubuntu:25.04 | coin3 | 0 | No fix |
| Ubuntu:25.04 | libxmltok | 0 | No fix |
| Ubuntu:25.04 | matanza | 0 | No fix |
| Ubuntu:25.04 | sitecopy | 0 | No fix |
| Ubuntu:25.04 | swish-e | 0 | No fix |
| Ubuntu:25.04 | xmlrpc-c | 0 | No fix |
| Ubuntu:25.10 | cadaver | 0 | No fix |
| Ubuntu:25.10 | coin3 | 0 | No fix |
| Ubuntu:25.10 | matanza | 0 | No fix |
| Ubuntu:25.10 | sitecopy | 0 | No fix |
| Ubuntu:25.10 | swish-e | 0 | No fix |
| Ubuntu:25.10 | xmlrpc-c | 0 | No fix |
| Ubuntu:Pro:14.04:LTS | coin3 | 0 | No fix |
| Ubuntu:Pro:14.04:LTS | vnc4 | 0 | No fix |
| Ubuntu:Pro:14.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | ayttm | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | cableswig | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | cadaver | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | coin3 | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | insighttoolkit | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | libxmltok | 0 | 1.2-3ubuntu0.16.04.1~esm2 |
| Ubuntu:Pro:16.04:LTS | matanza | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | swish-e | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | vnc4 | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | cadaver | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | coin3 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | libxmltok | 0 | 1.2-4ubuntu0.18.04.1~esm1 |
| Ubuntu:Pro:18.04:LTS | libxmltok | 0 | 1.2-4ubuntu0.18.04.1~esm4 |
| Ubuntu:Pro:18.04:LTS | matanza | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | swish-e | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | vnc4 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | cadaver | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | coin3 | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | libxmltok | 0 | 1.2-4ubuntu0.20.04.1~esm1 |
| Ubuntu:Pro:20.04:LTS | libxmltok | 0 | 1.2-4ubuntu0.20.04.1~esm4 |
| Ubuntu:Pro:20.04:LTS | matanza | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | swish-e | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | xmlrpc-c | 0 | No fix |
| Ubuntu:Pro:22.04:LTS | libxmltok | 0 | 1.2-4ubuntu0.22.04.1~esm1 |
| Ubuntu:Pro:22.04:LTS | libxmltok | 0 | 1.2-4ubuntu0.22.04.1~esm4 |
| Ubuntu:Pro:24.04:LTS | libxmltok | 0 | 1.2-4.1ubuntu2.24.0.4.1+esm2 |
| openSUSE:Tumbleweed | expat | 0 | 2.2.0-3.1 |
Related vulnerabilities
- CVE-2017-9233 XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser… Also affects expat
- CVE-2012-6702 Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of… Also affects expat
- CVE-2016-0718 Expat allows context-dependent attackers to cause a denial of service (crash) or possibly… Also affects expat
- CVE-2024-50602 An issue was discovered in libexpat before 2.6.4. Also affects expat
- CVE-2024-45491 An issue was discovered in libexpat before 2.6.3. Also affects expat
- CVE-2024-45492 An issue was discovered in libexpat before 2.6.3. Also affects expat
- CVE-2024-45490 An issue was discovered in libexpat before 2.6.3. Also affects expat
- CVE-2024-28757 libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use… Also affects expat