Vulnerability Database

296,480

Total vulnerabilities in the database

CVE-2016-4448

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.

  • Published: Jun 9, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2016-4448
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
hp / icewall_federation_agent 3.0 3.0.x
apple / watchos - 2.2.1.x
apple / mac_os_x - 10.11.6
xmlsoft / libxml2 - 2.9.3.x
apple / icloud - 5.2.1
apple / iphone_os - 9.3.2.x
redhat / enterprise_linux_desktop 7.0 7.0.x
redhat / enterprise_linux_server_aus 7.2 7.2.x
redhat / enterprise_linux_workstation 7.0 7.0.x
redhat / enterprise_linux_server_tus 7.2 7.2.x
redhat / enterprise_linux_server 7.0 7.0.x
redhat / enterprise_linux_server_eus 7.2 7.2.x
redhat / enterprise_linux_desktop 6.0 6.0.x
redhat / enterprise_linux_server 6.0 6.0.x
redhat / enterprise_linux_workstation 6.0 6.0.x
redhat / enterprise_linux_server_tus 7.3 7.3.x
redhat / enterprise_linux_server_aus 7.3 7.3.x
redhat / enterprise_linux_server_aus 7.4 7.4.x
redhat / enterprise_linux_server_eus 7.3 7.3.x
redhat / enterprise_linux_server_eus 7.4 7.4.x
redhat / enterprise_linux_server_eus 7.5 7.5.x
redhat / enterprise_linux_server_tus 7.6 7.6.x
redhat / enterprise_linux_server_eus 7.6 7.6.x
redhat / enterprise_linux_server_aus 7.6 7.6.x
redhat / enterprise_linux_server_eus 7.7 7.7.x
redhat / enterprise_linux_server_aus 7.7 7.7.x
redhat / enterprise_linux_server_tus 7.7 7.7.x
apple / itunes - 12.4.1.x
slackware / slackware_linux 14.1 14.1.x
slackware / slackware_linux 14.0 14.0.x
oracle / vm_server 3.4 3.4.x
oracle / vm_server 3.3 3.3.x
apple / tvos - 9.2.1.x
tenable / log_correlation_engine 4.8.0 4.8.0.x
mcafee / web_gateway - 7.5.2.10.x
mcafee / web_gateway 7.6.0.0 7.6.2.3.x
oracle / linux 7 7.x
oracle / linux 6 6.x