CVE-2016-4448: Critical severity hp icewall federation agent vulnerability
A vulnerability was found in the libxml2 library. There exist a possible format string vulnerability.
https://bugzilla.gnome.org/showbug.cgi?id=761029
Upstream fixes:
https://git.gnome.org/browse/libxml2/commit/?id=4472c3a5a5b516aaf59b89be602fbce52756c3e9 https://git.gnome.org/browse/libxml2/commit/?id=502f6a6d08b08c04b3ddfb1cd21b2f699c1b7f5b
Other sources
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4448?
CVE-2016-4448 has not been assigned a specific CVSS score but is categorized as a format string vulnerability in libxml2.
How do I fix CVE-2016-4448?
To fix CVE-2016-4448, update libxml2 to version 2.9.4 or later.
Which software is affected by CVE-2016-4448?
CVE-2016-4448 affects versions of libxml2 prior to 2.9.4, and certain software relying on older versions of this library.
What kind of attacks can CVE-2016-4448 enable?
CVE-2016-4448 allows attackers to potentially execute arbitrary code via crafted input that exploits the format string vulnerability.
Is my system vulnerable to CVE-2016-4448?
To determine if your system is vulnerable to CVE-2016-4448, check if you are using libxml2 version 2.9.3 or earlier.