CVE-2016-4472

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.

References

Affected packages

Git / github.com/libexpat/libexpat

Affected ranges

Type

GIT

Repo

https://github.com/libexpat/libexpat

Events

Introduced

Last affected

ee0adc0d9d245f4f18863c997be9a1bfeeb0a070

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.1"
        }
    ]
}

Type

GIT

Repo

https://github.com/python/cpython

Events

Introduced

Fixed

ca079a3ea30098aff3197c559a0e32d42dda6d84

Introduced

e054f452bd9118def58c18aa295662c9845e1c89

Fixed

17bf6b4671ec02d80ad29b278639d5307baddeb5

Introduced

3101b7076270756f8be699358c69c5d15ea2cc48

Fixed

7dc38385ce78c5c04637531c4325a83b57fbeb3a

Introduced

2e789a1f1d84b343a996e8654590703b5fbdd441

Fixed

3f568389763c205f8779ad75f2cf44ab9782608e

Introduced

5c4568a05a0a62b5947c55f68f9f2ecfb90a4f12

Fixed

5fd33b5926eb8c9352bf5718369b4a8d72c4bb44

Database specific

{
    "versions": [
        {
            "introduced": "2.7.0"
        },
        {
            "fixed": "2.7.15"
        },
        {
            "introduced": "3.3.0"
        },
        {
            "fixed": "3.3.7"
        },
        {
            "introduced": "3.4.0"
        },
        {
            "fixed": "3.4.7"
        },
        {
            "introduced": "3.5.0"
        },
        {
            "fixed": "3.5.4"
        },
        {
            "introduced": "3.6.0"
        },
        {
            "fixed": "3.6.2"
        }
    ]
}

Affected versions

Other

REC1_0

R_1_95_0

R_1_95_2

R_1_95_3

R_1_95_4

R_1_95_5

R_1_95_6

R_1_95_7

R_1_95_8

R_2_0_0

R_2_0_1

R_2_1_0

R_2_1_1

V1990307

V19981122

V19981231

V19990109

V19990425

V19990626

V19990709

V19990728

V19991013

V1_0

V1_1

V20000512

beta2

beta3

beta4

jclark-orig

libexpat-alpha-1

sourceforge_init

start

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-4472.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "6.5.1"
            }
        ]
    }
]