CVE-2016-9318: XEE
First published: Wed Nov 16 2016(Updated: )
Last updated 24 July 2024
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xmlsoft Libxml2 | <=2.9.4 | |
| Xmlsec Project Xmlsec | <=1.2.23 | |
| Canonical Ubuntu Linux | =12.04 | |
| Canonical Ubuntu Linux | =14.04 | |
| Canonical Ubuntu Linux | =16.04 | |
| Canonical Ubuntu Linux | =18.04 | |
| All of | ||
| Xmlsoft Libxml2 | <=2.9.4 | |
| Xmlsec Project Xmlsec | <=1.2.23 | |
| debian/libxml2 | 2.9.10+dfsg-6.7+deb11u4 2.9.10+dfsg-6.7+deb11u5 2.9.14+dfsg-1.3~deb12u1 2.12.7+dfsg+really2.9.14-0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/94347
- https://bugzilla.gnome.org/show_bug.cgi?id=772726
- https://github.com/lsh123/xmlsec/issues/43
- https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html
- https://security.gentoo.org/glsa/201711-01
- https://usn.ubuntu.com/3739-1/
- https://usn.ubuntu.com/3739-2/
- https://launchpad.net/bugs/cve/CVE-2016-9318
- https://gitlab.gnome.org/GNOME/libxml2/-/commit/2304078555896cf1638c628f50326aeef6f0e0d0
- https://gitlab.gnome.org/GNOME/libxml2/-/commit/030b1f7a27c22f9237eddca49ec5e620b6258d7d
- https://gitlab.gnome.org/GNOME/libxml2/-/commit/ad88b54f1a28a8565964a370b5d387927b633c0d
- https://security-tracker.debian.org/tracker/CVE-2016-9318
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9318
- https://nvd.nist.gov/vuln/detail/CVE-2016-9318
- https://ubuntu.com/security/CVE-2016-9318
Frequently Asked Questions
What is CVE-2016-9318?
CVE-2016-9318 is a vulnerability in libxml2 version 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, that allows remote attackers to conduct XML External Entity (XXE) attacks.
How severe is CVE-2016-9318?
CVE-2016-9318 has a severity rating of 5.5 (medium).
Which versions of libxml2 are affected by CVE-2016-9318?
Versions 2.9.4 and earlier of libxml2 are affected by CVE-2016-9318.
How can I fix CVE-2016-9318 in libxml2?
To fix CVE-2016-9318 in libxml2, you should update to version 2.9.4+dfsg1-6.1ubuntu1.2 or later.
Where can I find more information about CVE-2016-9318?
You can find more information about CVE-2016-9318 at the following references: [Bugzilla](https://bugzilla.gnome.org/show_bug.cgi?id=772726), [GitHub](https://github.com/lsh123/xmlsec/issues/43), [SecurityFocus](http://www.securityfocus.com/bid/94347).
- collector/nvd-index
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/weakness
- agent/severity
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- agent/remedy
- agent/references
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- agent/last-modified-date
- agent/trending
- vendor/xmlsoft
- canonical/xmlsoft libxml2
- version/xmlsoft libxml2/2.9.4
- vendor/xmlsec project
- canonical/xmlsec project xmlsec
- version/xmlsec project xmlsec/1.2.23
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/12.04
- version/canonical ubuntu linux/14.04
- version/canonical ubuntu linux/16.04
- version/canonical ubuntu linux/18.04
- package-manager/debian