CVE-2016-4472

moderate-risk
Published 2016-06-30

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.

Do I need to act?

~
2.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.1/10 High
NETWORK / HIGH complexity

Affected Products (4)

Policy Auditor

Affected Vendors

Canonical Libexpat Project Mcafee Python

References (14)

Third Party Advisory http://www.securityfocus.com/bid/91528
Third Party Advisory http://www.ubuntu.com/usn/USN-3013-1
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1344251
Third Party Advisory https://kc.mcafee.com/corporate/index?page=content&id=SB10365
Third Party Advisory https://security.gentoo.org/glsa/201701-21
Patch https://sourceforge.net/p/expat/code_git/ci/f0bec73b018caa07d3e75ec8dd967f3785d7...
Third Party Advisory https://www.tenable.com/security/tns-2016-20
Third Party Advisory http://www.securityfocus.com/bid/91528
Third Party Advisory http://www.ubuntu.com/usn/USN-3013-1
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1344251
Third Party Advisory https://kc.mcafee.com/corporate/index?page=content&id=SB10365
Third Party Advisory https://security.gentoo.org/glsa/201701-21
Patch https://sourceforge.net/p/expat/code_git/ci/f0bec73b018caa07d3e75ec8dd967f3785d7...
Third Party Advisory https://www.tenable.com/security/tns-2016-20
39
/ 100
moderate-risk
Severity 24/34 · High
Exploitability 5/34 · Minimal
Exposure 10/34 · Low