CVE-2016-2073: Buffer Overflow
An out-of-bounds read flaw was reported in libxml2's htmlParseNameComplex() function:
http://seclists.org/oss-sec/2016/q1/199
A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose crash.
Other sources
The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2073?
CVE-2016-2073 has a moderate severity level due to the potential for an out-of-bounds read that could be exploited by a remote attacker.
How do I fix CVE-2016-2073?
To fix CVE-2016-2073, update libxml2 to a secure version, specifically versions 2.9.4+dfsg1-7+deb10u4, 2.9.4+dfsg1-7+deb10u6, or newer.
Which systems are affected by CVE-2016-2073?
CVE-2016-2073 affects multiple systems, including Debian 8.0 and various versions of Ubuntu Linux.
What is the cause of CVE-2016-2073?
CVE-2016-2073 is caused by an out-of-bounds read flaw in the htmlParseNameComplex() function of libxml2.
Can CVE-2016-2073 lead to data breaches?
While CVE-2016-2073 primarily presents a risk of denial of service, it may also lead to information leakage in certain scenarios.