CVE-2016-1836

• openSUSE-SU-2024:10192-1
• openSUSE-SU-2024:10228-1

• 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "9.3.2"
                }
            ],
            "vendor_product": "apple:iphone_os"
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "10.11.5"
                }
            ],
            "vendor_product": "apple:mac_os_x"
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "9.2.1"
                }
            ],
            "vendor_product": "apple:tvos"
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "2.2.1"
                }
            ],
            "vendor_product": "apple:watchos"
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "12.04"
                },
                {
                    "last_affected": "14.04"
                },
                {
                    "last_affected": "15.10"
                },
                {
                    "last_affected": "16.04"
                }
            ],
            "vendor_product": "canonical:ubuntu_linux"
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "8.0"
                }
            ],
            "vendor_product": "debian:debian_linux"
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "7.5.0.0"
                },
                {
                    "last_affected": "7.5.2.10"
                },
                {
                    "introduced": "7.6.0.0"
                },
                {
                    "last_affected": "7.6.2.3"
                }
            ],
            "vendor_product": "mcafee:web_gateway"
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "6.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "vendor_product": "redhat:enterprise_linux_desktop"
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "6.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:enterprise_linux_server"
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "7.2"
                },
                {
                    "last_affected": "7.3"
                },
                {
                    "last_affected": "7.4"
                },
                {
                    "last_affected": "7.6"
                }
            ],
            "vendor_product": "redhat:enterprise_linux_server_aus"
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.2"
                },
                {
                    "last_affected": "7.3"
                },
                {
                    "last_affected": "7.4"
                },
                {
                    "last_affected": "7.5"
                },
                {
                    "last_affected": "7.6"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:enterprise_linux_server_eus"
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.2"
                },
                {
                    "last_affected": "7.3"
                },
                {
                    "last_affected": "7.6"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:enterprise_linux_server_tus"
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "6.0"
                },
                {
                    "last_affected": "7.0"
                }
            ],
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:enterprise_linux_workstation"
        }
    ]
}

• http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
• http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html
• http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
• http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html
• http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html
• http://lists.apple.com/archives/security-announce/2016/May/msg00001.html
• http://lists.apple.com/archives/security-announce/2016/May/msg00002.html
• http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
• http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
• http://rhn.redhat.com/errata/RHSA-2016-2957.html
• http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
• http://www.securityfocus.com/bid/90691
• http://www.securitytracker.com/id/1035890
• http://www.ubuntu.com/usn/USN-2994-1
• http://xmlsoft.org/news.html
• https://access.redhat.com/errata/RHSA-2016:1292
• https://security.gentoo.org/glsa/201701-37
• https://support.apple.com/HT206564
• https://support.apple.com/HT206566
• https://support.apple.com/HT206567
• https://support.apple.com/HT206568
• https://support.apple.com/HT206899
• https://support.apple.com/HT206901
• https://support.apple.com/HT206902
• https://support.apple.com/HT206903
• https://support.apple.com/HT206904
• https://support.apple.com/HT206905
• https://www.debian.org/security/2016/dsa-3593
• https://www.tenable.com/security/tns-2016-18
• https://bugzilla.gnome.org/show_bug.cgi?id=759398
• https://git.gnome.org/browse/libxml2/commit/?id=45752d2c334b50016666d8f0ec3691e2d680f0a0
• https://kc.mcafee.com/corporate/index?page=content&id=SB10170