csaf_suse - suse-su-2016:1204-1

Vulnerability from csaf_suse

Published

2016-05-03 14:20

Modified

2016-05-03 14:20

Summary

Security update for libxml2

Notes

Title of the patch

Security update for libxml2

Description of the patch

This update for libxml2 fixes two security issues: - libxml2 limits the number of recursions an XML document can contain so to protect against the 'Billion Laughs' denial-of-service attack. Unfortunately, the underlying counter was not incremented properly in all necessary locations. Therefore, specially crafted XML documents could exhaust all available stack space and crash the XML parser without running into the recursion limit. This vulnerability has been fixed. (bsc#975947) - When running in recovery mode, certain invalid XML documents would trigger an infinite recursion in libxml2 that ran until all stack space was exhausted. This vulnerability could have been used to facilitate a denial-of-sevice attack. (CVE-2016-3627, bsc#972335)

Patchnames

SUSE-SLE-DESKTOP-12-2016-709,SUSE-SLE-DESKTOP-12-SP1-2016-709,SUSE-SLE-SDK-12-2016-709,SUSE-SLE-SDK-12-SP1-2016-709,SUSE-SLE-SERVER-12-2016-709,SUSE-SLE-SERVER-12-SP1-2016-709

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for libxml2",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for libxml2 fixes two security issues:\n\n- libxml2 limits the number of recursions an XML document can contain so to protect against the 'Billion Laughs' denial-of-service attack. Unfortunately, the underlying counter was not incremented properly in all necessary locations. Therefore, specially crafted XML documents could exhaust all available stack space and crash the XML parser without running into the recursion limit. This vulnerability has been fixed. (bsc#975947)\n\n- When running in recovery mode, certain invalid XML documents would trigger an infinite recursion in libxml2 that ran until all stack space was exhausted. This vulnerability could have been used to facilitate a denial-of-sevice attack. (CVE-2016-3627, bsc#972335)\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-SLE-DESKTOP-12-2016-709,SUSE-SLE-DESKTOP-12-SP1-2016-709,SUSE-SLE-SDK-12-2016-709,SUSE-SLE-SDK-12-SP1-2016-709,SUSE-SLE-SERVER-12-2016-709,SUSE-SLE-SERVER-12-SP1-2016-709",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1204-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2016:1204-1",
            url: "https://www.suse.com/support/update/announcement/2016/suse-su-20161204-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2016:1204-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2016-May/002036.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 972335",
            url: "https://bugzilla.suse.com/972335",
         },
         {
            category: "self",
            summary: "SUSE Bug 975947",
            url: "https://bugzilla.suse.com/975947",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-3627 page",
            url: "https://www.suse.com/security/cve/CVE-2016-3627/",
         },
      ],
      title: "Security update for libxml2",
      tracking: {
         current_release_date: "2016-05-03T14:20:10Z",
         generator: {
            date: "2016-05-03T14:20:10Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2016:1204-1",
         initial_release_date: "2016-05-03T14:20:10Z",
         revision_history: [
            {
               date: "2016-05-03T14:20:10Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-doc-2.9.1-20.1.noarch",
                        product: {
                           name: "libxml2-doc-2.9.1-20.1.noarch",
                           product_id: "libxml2-doc-2.9.1-20.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.1-20.1.ppc64le",
                        product: {
                           name: "libxml2-devel-2.9.1-20.1.ppc64le",
                           product_id: "libxml2-devel-2.9.1-20.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.1-20.1.ppc64le",
                        product: {
                           name: "libxml2-2-2.9.1-20.1.ppc64le",
                           product_id: "libxml2-2-2.9.1-20.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.1-20.1.ppc64le",
                        product: {
                           name: "libxml2-tools-2.9.1-20.1.ppc64le",
                           product_id: "libxml2-tools-2.9.1-20.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-libxml2-2.9.1-20.1.ppc64le",
                        product: {
                           name: "python-libxml2-2.9.1-20.1.ppc64le",
                           product_id: "python-libxml2-2.9.1-20.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.1-20.1.s390x",
                        product: {
                           name: "libxml2-devel-2.9.1-20.1.s390x",
                           product_id: "libxml2-devel-2.9.1-20.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.1-20.1.s390x",
                        product: {
                           name: "libxml2-2-2.9.1-20.1.s390x",
                           product_id: "libxml2-2-2.9.1-20.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-32bit-2.9.1-20.1.s390x",
                        product: {
                           name: "libxml2-2-32bit-2.9.1-20.1.s390x",
                           product_id: "libxml2-2-32bit-2.9.1-20.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.1-20.1.s390x",
                        product: {
                           name: "libxml2-tools-2.9.1-20.1.s390x",
                           product_id: "libxml2-tools-2.9.1-20.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-libxml2-2.9.1-20.1.s390x",
                        product: {
                           name: "python-libxml2-2.9.1-20.1.s390x",
                           product_id: "python-libxml2-2.9.1-20.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.1-20.1.x86_64",
                        product: {
                           name: "libxml2-2-2.9.1-20.1.x86_64",
                           product_id: "libxml2-2-2.9.1-20.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-32bit-2.9.1-20.1.x86_64",
                        product: {
                           name: "libxml2-2-32bit-2.9.1-20.1.x86_64",
                           product_id: "libxml2-2-32bit-2.9.1-20.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.1-20.1.x86_64",
                        product: {
                           name: "libxml2-tools-2.9.1-20.1.x86_64",
                           product_id: "libxml2-tools-2.9.1-20.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-libxml2-2.9.1-20.1.x86_64",
                        product: {
                           name: "python-libxml2-2.9.1-20.1.x86_64",
                           product_id: "python-libxml2-2.9.1-20.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.1-20.1.x86_64",
                        product: {
                           name: "libxml2-devel-2.9.1-20.1.x86_64",
                           product_id: "libxml2-devel-2.9.1-20.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12",
                           product_id: "SUSE Linux Enterprise Desktop 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP1",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP1",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12",
                        product: {
                           name: "SUSE Linux Enterprise Server 12",
                           product_id: "SUSE Linux Enterprise Server 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP1",
                           product_id: "SUSE Linux Enterprise Server 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp1",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-20.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
               product_id: "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12",
               product_id: "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-devel-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12",
               product_id: "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-devel-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
               product_id: "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-devel-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-devel-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-devel-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-devel-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-2-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-2-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.1-20.1.noarch as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-20.1.noarch",
            },
            product_reference: "libxml2-doc-2.9.1-20.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.ppc64le",
            },
            product_reference: "python-libxml2-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.s390x",
            },
            product_reference: "python-libxml2-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-2-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-2-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.1-20.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-20.1.noarch",
            },
            product_reference: "libxml2-doc-2.9.1-20.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.ppc64le",
            },
            product_reference: "python-libxml2-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.s390x",
            },
            product_reference: "python-libxml2-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-2-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-2-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.1-20.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-20.1.noarch",
            },
            product_reference: "libxml2-doc-2.9.1-20.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.ppc64le",
            },
            product_reference: "python-libxml2-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.s390x",
            },
            product_reference: "python-libxml2-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
               product_id: "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-2-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-2-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.1-20.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-20.1.noarch",
            },
            product_reference: "libxml2-doc-2.9.1-20.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.ppc64le",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.s390x",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
            },
            product_reference: "libxml2-tools-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.ppc64le",
            },
            product_reference: "python-libxml2-2.9.1-20.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.s390x",
            },
            product_reference: "python-libxml2-2.9.1-20.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-libxml2-2.9.1-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
            },
            product_reference: "python-libxml2-2.9.1-20.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-3627",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-3627",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-20.1.noarch",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-20.1.noarch",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-20.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-20.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-3627",
               url: "https://www.suse.com/security/cve/CVE-2016-3627",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026099 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/1026099",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026101 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/1026101",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 972335 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/972335",
            },
            {
               category: "external",
               summary: "SUSE Bug 975947 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/975947",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-20.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-20.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-20.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-20.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-doc-2.9.1-20.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12:libxml2-doc-2.9.1-20.1.noarch",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server 12:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-doc-2.9.1-20.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-2-32bit-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-doc-2.9.1-20.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:libxml2-tools-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:python-libxml2-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP1:libxml2-devel-2.9.1-20.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12:libxml2-devel-2.9.1-20.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-03T14:20:10Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-3627",
      },
   ],
}

cve-2016-3627

Vulnerability from cvelistv5

Published

2016-05-17 14:00

Modified

2024-08-06 00:03

Severity ?

Summary

The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.

References

▼	URL	Tags
	http://seclists.org/fulldisclosure/2016/May/10	mailing-list, x_refsource_FULLDISC
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2016:1292	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/03/21/2	mailing-list, x_refsource_MLIST
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	https://www.debian.org/security/2016/dsa-3593	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1035335	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-2994-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/84992	vdb-entry, x_refsource_BID
	https://www.tenable.com/security/tns-2016-18	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-37	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/03/21/3	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T00:03:34.258Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160503 CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser)",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2016/May/10",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10170",
               },
               {
                  name: "openSUSE-SU-2016:1446",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html",
               },
               {
                  name: "openSUSE-SU-2016:1298",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html",
               },
               {
                  name: "RHSA-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1292",
               },
               {
                  name: "[oss-security] 20160321 CVE request: Stack exhaustion in libxml2 parsing xml files in recover mode",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/03/21/2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
               },
               {
                  name: "DSA-3593",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2016/dsa-3593",
               },
               {
                  name: "1035335",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1035335",
               },
               {
                  name: "USN-2994-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2994-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
               },
               {
                  name: "84992",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/84992",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.tenable.com/security/tns-2016-18",
               },
               {
                  name: "RHSA-2016:2957",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2957.html",
               },
               {
                  name: "GLSA-201701-37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-37",
               },
               {
                  name: "[oss-security] 20160321 Re: CVE request: Stack exhaustion in libxml2 parsing xml files in recover mode",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/03/21/3",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-03-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160503 CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser)",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2016/May/10",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10170",
            },
            {
               name: "openSUSE-SU-2016:1446",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html",
            },
            {
               name: "openSUSE-SU-2016:1298",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html",
            },
            {
               name: "RHSA-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1292",
            },
            {
               name: "[oss-security] 20160321 CVE request: Stack exhaustion in libxml2 parsing xml files in recover mode",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/03/21/2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
            },
            {
               name: "DSA-3593",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2016/dsa-3593",
            },
            {
               name: "1035335",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1035335",
            },
            {
               name: "USN-2994-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2994-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
            },
            {
               name: "84992",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/84992",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.tenable.com/security/tns-2016-18",
            },
            {
               name: "RHSA-2016:2957",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2957.html",
            },
            {
               name: "GLSA-201701-37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-37",
            },
            {
               name: "[oss-security] 20160321 Re: CVE request: Stack exhaustion in libxml2 parsing xml files in recover mode",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/03/21/3",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-3627",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160503 CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser)",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2016/May/10",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239",
                  },
                  {
                     name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10170",
                     refsource: "CONFIRM",
                     url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10170",
                  },
                  {
                     name: "openSUSE-SU-2016:1446",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html",
                  },
                  {
                     name: "openSUSE-SU-2016:1298",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html",
                  },
                  {
                     name: "RHSA-2016:1292",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1292",
                  },
                  {
                     name: "[oss-security] 20160321 CVE request: Stack exhaustion in libxml2 parsing xml files in recover mode",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/03/21/2",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
                  },
                  {
                     name: "DSA-3593",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2016/dsa-3593",
                  },
                  {
                     name: "1035335",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1035335",
                  },
                  {
                     name: "USN-2994-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2994-1",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html",
                  },
                  {
                     name: "84992",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/84992",
                  },
                  {
                     name: "https://www.tenable.com/security/tns-2016-18",
                     refsource: "CONFIRM",
                     url: "https://www.tenable.com/security/tns-2016-18",
                  },
                  {
                     name: "RHSA-2016:2957",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2957.html",
                  },
                  {
                     name: "GLSA-201701-37",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201701-37",
                  },
                  {
                     name: "[oss-security] 20160321 Re: CVE request: Stack exhaustion in libxml2 parsing xml files in recover mode",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/03/21/3",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-3627",
      datePublished: "2016-05-17T14:00:00",
      dateReserved: "2016-03-21T00:00:00",
      dateUpdated: "2024-08-06T00:03:34.258Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

cve-2016-3627

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature