CVE Feed

    Dashboard / CVE / CVE-2016-9596

    CVE-2016-9596

    libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627.

    Published:Mar 21, 2016
    Last Modified:Nov 21, 2024
    EPS:Aug 16, 2018
    EPSS Score:0.00673
    CVSS Score:6.5

    Affected Products

    Vendor
    Redhat
    Product
    Jboss Core Services
    Vendor
    Xmlsoft
    Product
    Libxml2

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-6732 (CVSS 6.5) — A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Sche…
    CVE-2026-3234 (CVSS 4.3) — A flaw was found in mod_proxy_cluster. This vulnerability, a Carriage Return Line Feed (CRLF) injection in th…
    CVE-2026-1757 (CVSS 6.2) — A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memo…
    CVE-2026-0992 (CVSS 2.9) — A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when proc…
    CVE-2026-0990 (CVSS 5.9) — A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the x…
    CVE-2026-0989 (CVSS 3.7) — A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. …
    CVE-2025-6170 (CVSS 2.5) — A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a…
    CVE-2025-6021 (CVSS 7.5) — A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can …
    CVE-2025-49795 (CVSS 7.5) — A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw…
    CVE-2025-49796 (CVSS 9.1) — A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High