NVD Vulnerability Detail

CVE-2016-4447

Summary	The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.
Publication Date	June 10, 2016, 1:59 a.m.
Registration Date	Jan. 26, 2021, 2:12 p.m.
Last Update	Nov. 21, 2024, 11:52 a.m.

CVSS3.0 : HIGH
スコア	7.5
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高

CVSS2.0 : MEDIUM
Score	5.0
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:hp:icewall_federation_agent:3.0:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:15.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:o:oracle:vm_server:3.4:::::::*
cpe:2.3:o:oracle:vm_server:3.3:::::::*

Configuration5		or higher	or less	more than	less than
cpe:2.3:a:apple:itunes:12.4.1:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows::::::::

Configuration6	or higher	or less	more than	less than
cpe:2.3:o:apple:iphone_os::::::::		9.3.2
cpe:2.3:o:apple:tvos::::::::		9.2.1
cpe:2.3:o:apple:watchos::::::::		2.2.1
cpe:2.3:o:apple:mac_os_x::::::::		10.11.5

Configuration7		or higher	or less	more than	less than
cpe:2.3:a:xmlsoft:libxml2::::::::			2.9.3

Configuration8	or higher	or less	more than	less than
cpe:2.3:a:mcafee:web_gateway::::::::	7.5.0.0	7.5.2.10
cpe:2.3:a:mcafee:web_gateway::::::::	7.6.0.0	7.6.2.3

Related information, measures and tools

No	URL	タグ
1	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html	Mailing List Third Party Advisory
2	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html	Mailing List Third Party Advisory
3	http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html	Mailing List Third Party Advisory
4	http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html	Mailing List Third Party Advisory
5	http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html	Mailing List Third Party Advisory
6	http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html	Mailing List Third Party Advisory
7	http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html	Mailing List Not Applicable
8	http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html	Mailing List Not Applicable
9	http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html	Mailing List Third Party Advisory
10	http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html	Mailing List Third Party Advisory
11	http://rhn.redhat.com/errata/RHSA-2016-2957.html	Third Party Advisory
12	http://rhn.redhat.com/errata/RHSA-2016-2957.html	Third Party Advisory
13	http://www.openwall.com/lists/oss-security/2016/05/25/2	Mailing List Third Party Advisory
14	http://www.openwall.com/lists/oss-security/2016/05/25/2	Mailing List Third Party Advisory
15	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	Third Party Advisory
16	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	Third Party Advisory
17	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	Third Party Advisory
18	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	Third Party Advisory
19	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	Third Party Advisory
20	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	Third Party Advisory
21	http://www.securityfocus.com/bid/90864	Third Party Advisory VDB Entry
22	http://www.securityfocus.com/bid/90864	Third Party Advisory VDB Entry
23	http://www.securitytracker.com/id/1036348	Third Party Advisory VDB Entry
24	http://www.securitytracker.com/id/1036348	Third Party Advisory VDB Entry
25	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722	Exploit Mailing List Third Party Advisory
26	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722	Exploit Mailing List Third Party Advisory
27	http://www.ubuntu.com/usn/USN-2994-1	Third Party Advisory
28	http://www.ubuntu.com/usn/USN-2994-1	Third Party Advisory
29	http://xmlsoft.org/news.html	Release Notes Vendor Advisory
30	http://xmlsoft.org/news.html	Release Notes Vendor Advisory
31	https://access.redhat.com/errata/RHSA-2016:1292	Third Party Advisory
32	https://access.redhat.com/errata/RHSA-2016:1292	Third Party Advisory
33	https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83	Patch Third Party Advisory
34	https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83	Patch Third Party Advisory
35	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709	Third Party Advisory
36	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05194709	Third Party Advisory
37	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	Patch Third Party Advisory
38	https://kc.mcafee.com/corporate/index?page=content&id=SB10170	Patch Third Party Advisory
39	https://support.apple.com/HT206899	Third Party Advisory
40	https://support.apple.com/HT206899	Third Party Advisory
41	https://support.apple.com/HT206901	Third Party Advisory
42	https://support.apple.com/HT206901	Third Party Advisory
43	https://support.apple.com/HT206902	Third Party Advisory
44	https://support.apple.com/HT206902	Third Party Advisory
45	https://support.apple.com/HT206903	Third Party Advisory
46	https://support.apple.com/HT206903	Third Party Advisory
47	https://support.apple.com/HT206904	Third Party Advisory
48	https://support.apple.com/HT206904	Third Party Advisory
49	https://support.apple.com/HT206905	Third Party Advisory
50	https://support.apple.com/HT206905	Third Party Advisory
51	https://www.debian.org/security/2016/dsa-3593	Third Party Advisory
52	https://www.debian.org/security/2016/dsa-3593	Third Party Advisory
53	https://www.tenable.com/security/tns-2016-18	Third Party Advisory
54	https://www.tenable.com/security/tns-2016-18	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

libxml2 の parser.c の xmlParseElementDecl 関数におけるサービス運用妨害 (DoS) の脆弱性

Title	libxml2 の parser.c の xmlParseElementDecl 関数におけるサービス運用妨害 (DoS) の脆弱性
Summary	libxml2 の parser.c の xmlParseElementDecl 関数には、サービス運用妨害 (ヒープベースのバッファアンダーリードおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。
Possible impacts	攻撃者により、xmlParseName の処理に関する問題によって、巧妙に細工されたファイルを介して、サービス運用妨害 (ヒープベースのバッファアンダーリードおよびアプリケーションクラッシュ) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 23, 2016, midnight
Registration Date	June 14, 2016, 4:05 p.m.
Last Update	Nov. 17, 2016, 3:34 p.m.

Affected System

オラクル

Oracle VM サーバー

アップル

Apple Mac OS X 10.10.5

Apple Mac OS X 10.11 およびそれ以降

Apple Mac OS X 10.9.5

iCloud 5.2.1 未満 (Windows 7 以降)

iOS 9.3.3 未満 (iPad 2 以降)

iOS 9.3.3 未満 (iPhone 4s 以降)

iOS 9.3.3 未満 (iPod touch 第 5 世代以降)

iTunes 12.4.2 未満 (Windows 7 以降)

tvOS 9.2.2 未満 (Apple TV 第 4 世代)

watchOS 2.2.2 未満 (Apple Watch Edition)

watchOS 2.2.2 未満 (Apple Watch Hermes)

watchOS 2.2.2 未満 (Apple Watch Sport)

watchOS 2.2.2 未満 (Apple Watch)

Debian

Debian GNU/Linux 7.0

Debian GNU/Linux 8.0

Canonical

Ubuntu 12.04 LTS

Ubuntu 14.04 LTS

Ubuntu 15.10

Ubuntu 16.04 LTS

xmlsoft.org

libxml2 2.9.4 未満

ヒューレット・パッカード・エンタープライズ

IceWall Federation Agent 3.0 (RHEL 6/7)

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-4447	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4447
National Vulnerability Database (NVD)
2	CVE-2016-4447	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4447
Security Bug Tracker
3	CVE-2016-4447	https://security-tracker.debian.org/tracker/CVE-2016-4447

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Apple Mailing Lists
1	APPLE-SA-2016-07-18-1 OS X El Capitan v10.11.6 and Security Update 2016-004	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
2	APPLE-SA-2016-07-18-2 iOS 9.3.3	http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html
3	APPLE-SA-2016-07-18-3 watchOS 2.2.2	http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
4	APPLE-SA-2016-07-18-4 tvOS 9.2.2	http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html
5	APPLE-SA-2016-07-18-6 iTunes 12.4.2	http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html
Apple Security Updates
6	HT206899	https://support.apple.com/en-us/HT206899
7	HT206901	https://support.apple.com/en-us/HT206901
8	HT206902	https://support.apple.com/en-us/HT206902
9	HT206903	https://support.apple.com/en-us/HT206903
10	HT206904	https://support.apple.com/en-us/HT206904
11	HT206905	https://support.apple.com/en-us/HT206905
Apple セキュリティアップデート
12	HT206899	https://support.apple.com/ja-jp/HT206899
13	HT206901	https://support.apple.com/ja-jp/HT206901
14	HT206902	https://support.apple.com/ja-jp/HT206902
15	HT206903	https://support.apple.com/ja-jp/HT206903
16	HT206904	https://support.apple.com/ja-jp/HT206904
17	HT206905	https://support.apple.com/ja-jp/HT206905
Debian Security Advisory
18	DSA-3593	https://www.debian.org/security/2016/dsa-3593
GNOME GIT REPOSITORY
19	Heap-based buffer-underreads due to xmlParseName	https://git.gnome.org/browse/libxml2/commit/?id=00906759053986b8079985644172085f74331f83
HPE Security Bulletin
20	HPSBGN03628	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05194709
Oracle Technology Network
21	Oracle Linux Bulletin - July 2016	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
22	Oracle Solaris Third Party Bulletin - July 2016	http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
23	Oracle VM Server for x86 Bulletin - July 2016	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
Red Hat Security Advisory
24	RHSA-2016:1292	https://access.redhat.com/errata/RHSA-2016:1292
Turbolinux Security Advisory
25	TLSA-2016-22	http://www.turbolinux.co.jp/security/2016/TLSA-2016-22j.html
Ubuntu Security Notice
26	USN-2994-1	http://www.ubuntu.com/usn/USN-2994-1/
xmlsoft.org news
27	2.9.4: May 23 2016	http://xmlsoft.org/news.html

その他

No	Name	URL
JVN
1	JVNVU#94844193	http://jvn.jp/vu/JVNVU94844193/index.html

Change Log

No	Changed Details	Date of change
0	[2016年06月14日] 掲載 [2016年08月03日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT206899) を追加ベンダ情報：アップル (HT206901) を追加ベンダ情報：アップル (HT206905) を追加ベンダ情報：アップル (HT206904) を追加ベンダ情報：アップル (HT206902) を追加ベンダ情報：アップル (HT206903) を追加ベンダ情報：アップル (APPLE-SA-2016-07-18-6 iTunes 12.4.2) を追加ベンダ情報：アップル (APPLE-SA-2016-07-18-4 tvOS 9.2.2) を追加ベンダ情報：アップル (APPLE-SA-2016-07-18-3 watchOS 2.2.2) を追加ベンダ情報：アップル (APPLE-SA-2016-07-18-2 iOS 9.3.3) を追加ベンダ情報：アップル (APPLE-SA-2016-07-18-1 OS X El Capitan v10.11.6 and Security Update 2016-004) を追加参考情報：JVN (JVNVU#94844193) を追加 [2016年09月06日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：レッドハット (RHSA-2016:1292) を追加ベンダ情報：Debian (CVE-2016-4447) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03628) を追加 [2016年10月27日] ベンダ情報：ターボリナックス (TLSA-2016-22) を追加 [2016年11月17日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Linux Bulletin - July 2016) を追加ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - July 2016) を追加ベンダ情報：オラクル (Oracle VM Server for x86 Bulletin - July 2016) を追加	Feb. 17, 2018, 10:37 a.m.