CVE-2016-9597

It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.

Score

CVSS 3.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2018-07-30

Last modified

2024-08-06

Weaknesses

CWE-119, CWE-674

Affected products

• Ubuntu Linux (Canonical)
• Debian Linux (Debian)
• Icewall Federation Agent (Hp)
• Icewall File Manager (Hp)
• Leap (Opensuse)
• Libxml2 (Red Hat)
• Libxml2 (Xmlsoft)

References

• http://www.securityfocus.com/bid/98567
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9597