CVE-2016-9597: Buffer Overflow
It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.
Other sources
It was found that Red Hat JBoss Core Services incorrectly included CVE-2016-3705 as resolved in Apache HTTP 2.4.23 (erratum RHSA-2016:2957). The release did not include the fix to libxml2, leaving it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for CVE-2016-3705.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9597?
CVE-2016-9597 is classified with a moderate severity level due to the potential for Denial of Service attacks.
How do I fix CVE-2016-9597?
To fix CVE-2016-9597, ensure that your affected software versions are updated to include the appropriate patches.
What software is affected by CVE-2016-9597?
CVE-2016-9597 affects multiple versions of Ubuntu, Debian, and HP products, particularly those that utilize libxml2 version 2.9.3.
What kind of vulnerability is CVE-2016-9597?
CVE-2016-9597 is a Denial of Service vulnerability caused by a stack overflow in libxml2.
Is CVE-2016-9597 a regression issue?
Yes, CVE-2016-9597 is a regression of the previously addressed vulnerability CVE-2016-3705.