Staging Environment: Content and features may be unstable or change without notice.
Advisory details: vulnrichment / CVE-2016-1834
Advisory ID vulnrichment/CVE-2016-1834
Aliases
Summary Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3.1 7.8
ssvc Track
Reference id Reference type URL
http://rhn.redhat.com/errata/RHSA-2016-2957.html
https://www.debian.org/security/2016/dsa-3593
https://www.tenable.com/security/tns-2016-18
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
http://www.ubuntu.com/usn/USN-2994-1
http://xmlsoft.org/news.html
1035890 Advisory http://www.securitytracker.com/id/1035890
90691 Advisory http://www.securityfocus.com/bid/90691
HT206564 Other https://support.apple.com/HT206564
HT206566 Other https://support.apple.com/HT206566
HT206567 Other https://support.apple.com/HT206567
HT206568 Other https://support.apple.com/HT206568
?id=8fbbf5513d609c1770b391b99e33314cd0742704 Other https://git.gnome.org/browse/libxml2/commit/?id=8fbbf5513d609c1770b391b99e33314cd0742704
index?page=content&id=SB10170 Other https://kc.mcafee.com/corporate/index?page=content&id=SB10170
msg00001.html Advisory http://lists.apple.com/archives/security-announce/2016/May/msg00001.html
msg00002.html Advisory http://lists.apple.com/archives/security-announce/2016/May/msg00002.html
msg00003.html Advisory http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
msg00004.html Advisory http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
RHSA-2016:1292 Advisory https://access.redhat.com/errata/RHSA-2016:1292
show_bug.cgi?id=763071 Other https://bugzilla.gnome.org/show_bug.cgi?id=763071
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at None
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T17:15:12Z/ Found at None

Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T17:15:12Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2016/1xxx/CVE-2016-1834.json

Source Advisory: vulnrichment/CVE-2016-1834

View SSVC decision tree 
[{'Exploitation': 'none'},
 {'Automatable': 'no'},
 {'Technical Impact': 'total'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]