CVE-2016-9596: Medium severity red hat jboss core services vulnerability
It was found that Red Hat JBoss Core Services incorrectly fixed CVE-2016-3627 in Apache HTTP 2.4.23 (erratum RHSA-2016:2957), leaving libxml2 vulnerable to a Denial of Service attack via stack consumption.
Other sources
libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9596?
CVE-2016-9596 has been assigned a high severity rating due to its potential to cause Denial of Service attacks.
How do I fix CVE-2016-9596?
To fix CVE-2016-9596, you should upgrade to a version of libxml2 that is above 2.9.4.
Which software is affected by CVE-2016-9596?
CVE-2016-9596 affects Red Hat JBoss Core Services and libxml2 versions up to 2.9.4.
What type of vulnerability is CVE-2016-9596?
CVE-2016-9596 is a Denial of Service vulnerability related to stack consumption in libxml2.
Is CVE-2016-9596 exploitable remotely?
Yes, CVE-2016-9596 allows attackers to exploit the vulnerability remotely to launch Denial of Service attacks.