CVE-2016-3627
published 2016-05-17CVE-2016-3627: The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of…
PriorityP336high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
7.03%
93.5th percentile
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
Affected
36 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | libxml2 | < libxml2 2.9.3+dfsg1-1.1 (bookworm) | libxml2 2.9.3+dfsg1-1.1 (bookworm) |
| debian | libxml2 | — | — |
| hp | icewall_federation_agent | — | — |
| hp | icewall_file_manager | — | — |
| opensuse | leap | — | — |
| oracle | solaris | — | — |
| oracle | vm_server | — | — |
| oracle | vm_server | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server_aus | — | — |
| redhat | enterprise_linux_server_aus | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5LOW
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
libxml2 vulnerabilities
vendor_ubuntu·2016-06-06·CVSS 7.5
CVE-2015-8806 [HIGH] libxml2 vulnerabilities
Title: libxml2 vulnerabilities
Summary: Several security issues were fixed in libxml2.
It was discovered that libxml2 incorrectly handled certain malformed
documents. If a user or automated system were tricked into opening a
specially crafted document, an attacker could possibly cause libxml2 to
crash, resulting in a denial of service. (CVE-2015-8806, CVE-2016-2073,
CVE-2016-3627, CVE-2016-3705, CVE-2016-4447)
It was discovered that libxml2 incorrectly handled certain malformed
documents. If a user or automated system were tricked into opening a
specially crafted document, an attacker could cause libxml2 to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2016-1762, CVE-2016-1834)
Mateusz Jurczyk discovered that libxml2 incorrectly handled certain
malfo
Red Hat
libxml2: out-of-bounds read
vendor_redhat·2016-05-03·CVSS 7.5
CVE-2016-4483 [HIGH] CWE-122 libxml2: out-of-bounds read
libxml2: out-of-bounds read
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
Statement: When a specially-crafted XML file is parsed via an application compiled against libxml2, this can cause the application to crash. (No code execution)
Package: libxml2 (Red Hat Enterprise Linux 5) - Will not fix
Package: libxml2 (Red Hat Enterprise Linux 6) - Will not fix
Package: libxml2 (Red Hat Enterprise Linux 7) - Will not fix
Package: httpd (Red Hat JBoss Core Services) - Affected
Package: libxml2 (Red Hat JBoss Enterprise Web Server 3) - Will not fi
Red Hat
libxml2: stack exhaustion while parsing xml files in recovery mode
vendor_redhat·2016-03-21·CVSS 7.5
CVE-2016-3627 [HIGH] CWE-674 libxml2: stack exhaustion while parsing xml files in recovery mode
libxml2: stack exhaustion while parsing xml files in recovery mode
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
Missing recursive loop detection checks were found in the xmlParserEntityCheck() and xmlStringGetNodeList() functions of libxml2, causing application using the library to crash by stack exhaustion while building the associated data. An attacker able to send XML data to be parsed in recovery mode could launch a Denial of Service on the application.
Package: libxml2 (Red Hat Enterprise Linux 5) - Will not fix
Package: httpd (Red Hat JBoss Core Services) - Affected
Pack
Red Hat
libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)
vendor_redhat·2016-03-21·CVSS 7.5
CVE-2016-9596 [HIGH] CWE-674 libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)
libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)
libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.
Package: libxml2 (Red Hat Enterprise Linux 5) - Not affected
Package: libxml2 (Red Hat Enterprise Linux 6) - Not affected
Package: libxml2 (Red Hat Enterprise Linux 7) - Not affected
Package: httpd (Red Hat JBoss Core Services) - Affected
Debian
CVE-2016-3627: libxml2 - The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when u...
vendor_debian·2016·CVSS 7.5
CVE-2016-3627 [HIGH] CVE-2016-3627: libxml2 - The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when u...
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
Scope: local
bookworm: resolved (fixed in 2.9.3+dfsg1-1.1)
bullseye: resolved (fixed in 2.9.3+dfsg1-1.1)
forky: resolved (fixed in 2.9.3+dfsg1-1.1)
sid: resolved (fixed in 2.9.3+dfsg1-1.1)
trixie: resolved (fixed in 2.9.3+dfsg1-1.1)
Debian
CVE-2016-4483: libxml2 - The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows contex...
vendor_debian·2016·CVSS 7.5
CVE-2016-4483 [HIGH] CVE-2016-4483: libxml2 - The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows contex...
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
Scope: local
bookworm: resolved (fixed in 2.9.3+dfsg1-1.1)
bullseye: resolved (fixed in 2.9.3+dfsg1-1.1)
forky: resolved (fixed in 2.9.3+dfsg1-1.1)
sid: resolved (fixed in 2.9.3+dfsg1-1.1)
trixie: resolved (fixed in 2.9.3+dfsg1-1.1)
Debian
CVE-2016-9596: libxml2 - libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allow...
vendor_debian·2016·CVSS 7.5
CVE-2016-9596 [HIGH] CVE-2016-9596: libxml2 - libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allow...
libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
GHSA
GHSA-2xwf-cg9m-5547: The xmlStringGetNodeList function in tree
ghsa_unreviewed·2022-05-14
CVE-2016-3627 [HIGH] CWE-20 GHSA-2xwf-cg9m-5547: The xmlStringGetNodeList function in tree
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
GHSA
GHSA-ch7x-55jf-9fgx: libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack cons
ghsa_unreviewed·2022-05-13·CVSS 7.5
CVE-2016-9596 [HIGH] CWE-400 GHSA-ch7x-55jf-9fgx: libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack cons
libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.
GHSA
GHSA-xr2r-hh4x-gv58: The xmlBufAttrSerializeTxtContent function in xmlsave
ghsa_unreviewed·2022-05-13·CVSS 7.5
CVE-2016-4483 [HIGH] CWE-502 GHSA-xr2r-hh4x-gv58: The xmlBufAttrSerializeTxtContent function in xmlsave
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
OSV
CVE-2016-4483: The xmlBufAttrSerializeTxtContent function in xmlsave
osv·2017-04-11·CVSS 7.5
CVE-2016-4483 [HIGH] CVE-2016-4483: The xmlBufAttrSerializeTxtContent function in xmlsave
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
OSV
libxml2 vulnerabilities
osv·2016-06-06·CVSS 7.5
CVE-2015-8806 [HIGH] libxml2 vulnerabilities
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain malformed
documents. If a user or automated system were tricked into opening a
specially crafted document, an attacker could possibly cause libxml2 to
crash, resulting in a denial of service. (CVE-2015-8806, CVE-2016-2073,
CVE-2016-3627, CVE-2016-3705, CVE-2016-4447)
It was discovered that libxml2 incorrectly handled certain malformed
documents. If a user or automated system were tricked into opening a
specially crafted document, an attacker could cause libxml2 to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2016-1762, CVE-2016-1834)
Mateusz Jurczyk discovered that libxml2 incorrectly handled certain
malformed documents. If a user or automated system were tricked into
OSV
CVE-2016-3627: The xmlStringGetNodeList function in tree
osv·2016-05-17·CVSS 7.5
CVE-2016-3627 [HIGH] CVE-2016-3627: The xmlStringGetNodeList function in tree
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-9598 libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS)
bugzilla·2016-12-22·CVSS 7.5
CVE-2016-9598 [HIGH] CVE-2016-9598 libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS)
CVE-2016-9598 libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS)
libxml2: out-of-bounds read
Discussion:
Are there any details available for this? Upsteam bug, commit reference?
---
(In reply to Salvatore Bonaccorso from comment #2)
> Are there any details available for this? Upsteam bug, commit reference?
Referring to https://bugzilla.redhat.com/show_bug.cgi?id=1408302#c4
---
CVE-2016-9598 was assigned for incomplete fix of CVE-2016-4483, however that was closed as duplicate of CVE-2016-3627. That actually makes this CVE a duplicate of CVE-2016-9596 since that one was assigned for incomplete fix of CVE-2016-3627.
Hence I suggest to close this one as duplicate of CVE-2016-9596. Would that work for you?
---
This CVE id is for the same issue as CVE-2016-4483 (bug 1332820)
Bugzilla
CVE-2016-9596 libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)
bugzilla·2016-12-22·CVSS 7.5
CVE-2016-9596 [HIGH] CVE-2016-9596 libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)
CVE-2016-9596 libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS)
It was found that Red Hat JBoss Core Services incorrectly fixed CVE-2016-3627 in Apache HTTP 2.4.23 (erratum RHSA-2016:2957), leaving libxml2 vulnerable to a Denial of Service attack via stack consumption.
Discussion:
Are there any details available for this? Upsteam bug, commit reference?
---
(In reply to Salvatore Bonaccorso from comment #2)
> Are there any details available for this? Upsteam bug, commit reference?
This and the other two should be for a Red Hat specific security regressions, effectively duplicates of other public CVEs. I'm going to ask Bharti to fix these bugs up properly.
---
dup of CVE-2016-3627 I would say
---
This CVE id is for the same issue as
Bugzilla
CVE-2016-4483 libxml2: out-of-bounds read
bugzilla·2016-05-04·CVSS 7.5
CVE-2016-4483 [HIGH] CVE-2016-4483 libxml2: out-of-bounds read
CVE-2016-4483 libxml2: out-of-bounds read
A vulnerability was found in libxml2. Parsing a maliciously crafted xml file could cause the application to crash if recover mode is used.
References:
http://seclists.org/oss-sec/2016/q2/195
Discussion:
Created libxml2 tracking bugs for this issue:
Affects: fedora-all [bug 1332823]
---
Created mingw-libxml2 tracking bugs for this issue:
Affects: fedora-all [bug 1332824]
Affects: epel-7 [bug 1332825]
---
This issue has been addressed in the following products:
Via RHSA-2016:2957 https://rhn.redhat.com/errata/RHSA-2016-2957.html
---
CVE-2016-4483 is NOT a duplicate of CVE-2016-3627!
This issue has NOT been fixed for at least RHEL6 (CVE-2016-3627 has been).
This issue was fixed upstream with commit c97750d11bb8b6f3303e7131fe526a61ac65
Bugzilla
CVE-2016-3627 libxml2: stack exhaustion while parsing xml files in recovery mode
bugzilla·2016-03-21·CVSS 7.5
CVE-2016-3627 [HIGH] CVE-2016-3627 libxml2: stack exhaustion while parsing xml files in recovery mode
CVE-2016-3627 libxml2: stack exhaustion while parsing xml files in recovery mode
A vulnerability was found in a way libxml2 parses certain files. With the libxml2 in recovery mode, a maliciously crafted filed could cause libxml2 to crash.
References:
http://seclists.org/oss-sec/2016/q1/682
CVE assignment:
http://seclists.org/oss-sec/2016/q1/683
Discussion:
Created libxml2 tracking bugs for this issue:
Affects: fedora-all [bug 1319830]
---
Created mingw-libxml2 tracking bugs for this issue:
Affects: fedora-all [bug 1319831]
Affects: epel-7 [bug 1319832]
---
Upstream bug:
https://bugzilla.gnome.org/show_bug.cgi?id=762100 (private)
Patch:
https://git.gnome.org/browse/libxml2/commit/?id=bdd66182ef53fe1f7209ab6535fda56366bd7ac9
---
*** Bug 1332820 has been marked as a duplicate
Bugzilla
CVE-2016-3627 mingw-libxml2: libxml2: stack exhaustion while parsing xml files in recovery mode [epel-7]
bugzilla·2016-03-21·CVSS 7.5
CVE-2016-3627 [HIGH] CVE-2016-3627 mingw-libxml2: libxml2: stack exhaustion while parsing xml files in recovery mode [epel-7]
CVE-2016-3627 mingw-libxml2: libxml2: stack exhaustion while parsing xml files in recovery mode [epel-7]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
[bug automatically creat
Bugzilla
CVE-2016-3627 libxml2: stack exhaustion while parsing xml files in recovery mode [fedora-all]
bugzilla·2016-03-21·CVSS 7.5
CVE-2016-3627 [HIGH] CVE-2016-3627 libxml2: stack exhaustion while parsing xml files in recovery mode [fedora-all]
CVE-2016-3627 libxml2: stack exhaustion while parsing xml files in recovery mode [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple suppor
Bugzilla
CVE-2016-3627 mingw-libxml2: libxml2: stack exhaustion while parsing xml files in recovery mode [fedora-all]
bugzilla·2016-03-21·CVSS 7.5
CVE-2016-3627 [HIGH] CVE-2016-3627 mingw-libxml2: libxml2: stack exhaustion while parsing xml files in recovery mode [fedora-all]
CVE-2016-3627 mingw-libxml2: libxml2: stack exhaustion while parsing xml files in recovery mode [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects
Tenable
[R2] Nessus 6.10 Fixes Multiple Third-party Library Vulnerabilities
blogs_tenable·2017-02-01
[R2] Nessus 6.10 Fixes Multiple Third-party Library Vulnerabilities
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Tenable
[R3] LCE 5.0.0 Fixes Multiple Third-party Library Vulnerabilities
blogs_tenable·2017-01-31
[R3] LCE 5.0.0 Fixes Multiple Third-party Library Vulnerabilities
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.htmlhttp://lists.opensuse.org/opensuse-updates/2016-05/msg00127.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2957.htmlhttp://seclists.org/fulldisclosure/2016/May/10http://www.openwall.com/lists/oss-security/2016/03/21/2http://www.openwall.com/lists/oss-security/2016/03/21/3http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlhttp://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlhttp://www.securityfocus.com/bid/84992http://www.securitytracker.com/id/1035335http://www.ubuntu.com/usn/USN-2994-1https://access.redhat.com/errata/RHSA-2016:1292https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239https://kc.mcafee.com/corporate/index?page=content&id=SB10170https://security.gentoo.org/glsa/201701-37https://www.debian.org/security/2016/dsa-3593https://www.tenable.com/security/tns-2016-18http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.htmlhttp://lists.opensuse.org/opensuse-updates/2016-05/msg00127.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2957.htmlhttp://seclists.org/fulldisclosure/2016/May/10http://www.openwall.com/lists/oss-security/2016/03/21/2http://www.openwall.com/lists/oss-security/2016/03/21/3http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlhttp://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlhttp://www.securityfocus.com/bid/84992http://www.securitytracker.com/id/1035335http://www.ubuntu.com/usn/USN-2994-1https://access.redhat.com/errata/RHSA-2016:1292https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239https://kc.mcafee.com/corporate/index?page=content&id=SB10170https://security.gentoo.org/glsa/201701-37https://www.debian.org/security/2016/dsa-3593https://www.tenable.com/security/tns-2016-18
2016-05-17
Published