VYPR
← All advisories
Medium severity6.5OSV Advisory· Published Aug 16, 2018· Updated Jun 17, 2026

CVE-2016-9596

CVE-2016-9596

Description

libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Red Hat/Jboss Core Services2 versions
    cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:*
    • (no CPE)
  • Xmlsoft/Libxml22 versions
    cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*range: <2.9.4
    • (no CPE)
  • GNOME Foundation/Libxml2OSV
    Range: CVE-2013-2877, CVE-2014-0191, CVE-2014-3660, …

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.