UBUNTU-CVE-2016-4472
- Source
- https://ubuntu.com/security/CVE-2016-4472
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4472.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2016-4472
- Upstream
- Downstream
- Related
- Published
- 2016-05-18T00:00:00Z
- Modified
- 2025-07-18T16:43:30Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.
- References
Affected packages
Ubuntu:Pro:14.04:LTS / coin3
Package
- Name
- coin3
- Purl
- pkg:deb/ubuntu/coin3@3.1.4~abc9f50-4ubuntu2+esm1?arch=source&distro=esm-infra-legacy/trusty
Ubuntu:Pro:14.04:LTS / vnc4
Package
- Name
- vnc4
- Purl
- pkg:deb/ubuntu/vnc4@4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1?arch=source&distro=esm-infra-legacy/trusty
Ubuntu:Pro:14.04:LTS / xmlrpc-c
Package
- Name
- xmlrpc-c
- Purl
- pkg:deb/ubuntu/xmlrpc-c@1.33.06-0ubuntu1?arch=source&distro=esm-infra-legacy/trusty
Ubuntu:Pro:16.04:LTS / ayttm
Package
- Name
- ayttm
- Purl
- pkg:deb/ubuntu/ayttm@0.6.3-3build1?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / cableswig
Package
- Name
- cableswig
- Purl
- pkg:deb/ubuntu/cableswig@0.1.0+git20150808-2?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / cadaver
Package
- Name
- cadaver
- Purl
- pkg:deb/ubuntu/cadaver@0.23.3-2ubuntu2?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / coin3
Package
- Name
- coin3
- Purl
- pkg:deb/ubuntu/coin3@3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / insighttoolkit
Package
- Name
- insighttoolkit
- Purl
- pkg:deb/ubuntu/insighttoolkit@3.20.1+git20120521-6build1?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / libxmltok
Package
- Name
- libxmltok
- Purl
- pkg:deb/ubuntu/libxmltok@1.2-3ubuntu0.16.04.1~esm2?arch=source&distro=esm-apps/xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.2-3ubuntu0.16.04.1~esm2
Ecosystem specific
{
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_version": "1.2-3ubuntu0.16.04.1~esm2",
"binary_name": "libxmltok1"
},
{
"binary_version": "1.2-3ubuntu0.16.04.1~esm2",
"binary_name": "libxmltok1-dbgsym"
},
{
"binary_version": "1.2-3ubuntu0.16.04.1~esm2",
"binary_name": "libxmltok1-dev"
}
]
}
Ubuntu:Pro:16.04:LTS / matanza
Package
- Name
- matanza
- Purl
- pkg:deb/ubuntu/matanza@0.13+ds1-5?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / swish-e
Package
- Name
- swish-e
- Purl
- pkg:deb/ubuntu/swish-e@2.4.7-4build1?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / vnc4
Package
- Name
- vnc4
- Purl
- pkg:deb/ubuntu/vnc4@4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / xmlrpc-c
Package
- Name
- xmlrpc-c
- Purl
- pkg:deb/ubuntu/xmlrpc-c@1.33.14-1ubuntu1?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:18.04:LTS / cadaver
Package
- Name
- cadaver
- Purl
- pkg:deb/ubuntu/cadaver@0.23.3-2ubuntu3?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / coin3
Package
- Name
- coin3
- Purl
- pkg:deb/ubuntu/coin3@3.1.4~abc9f50+dfsg3-2?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / libxmltok
Package
- Name
- libxmltok
- Purl
- pkg:deb/ubuntu/libxmltok@1.2-4ubuntu0.18.04.1~esm4?arch=source&distro=esm-apps/bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.2-4ubuntu0.18.04.1~esm4
Affected versions
1.*
1.2-4
1.2-4ubuntu0.18.04.1~esm1
1.2-4ubuntu0.18.04.1~esm2
1.2-4ubuntu0.18.04.1~esm3
Ecosystem specific
{
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_version": "1.2-4ubuntu0.18.04.1~esm4",
"binary_name": "libxmltok1"
},
{
"binary_version": "1.2-4ubuntu0.18.04.1~esm4",
"binary_name": "libxmltok1-dbgsym"
},
{
"binary_version": "1.2-4ubuntu0.18.04.1~esm4",
"binary_name": "libxmltok1-dev"
}
]
}
Ubuntu:Pro:18.04:LTS / matanza
Package
- Name
- matanza
- Purl
- pkg:deb/ubuntu/matanza@0.13+ds1-6?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / swish-e
Package
- Name
- swish-e
- Purl
- pkg:deb/ubuntu/swish-e@2.4.7-5ubuntu1?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / vnc4
Package
- Name
- vnc4
- Purl
- pkg:deb/ubuntu/vnc4@4.1.1+xorg4.3.0-37.3ubuntu2?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / xmlrpc-c
Package
- Name
- xmlrpc-c
- Purl
- pkg:deb/ubuntu/xmlrpc-c@1.33.14-8build1?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:20.04:LTS / cadaver
Package
- Name
- cadaver
- Purl
- pkg:deb/ubuntu/cadaver@0.23.3-2.1build1?arch=source&distro=esm-apps/focal
Ubuntu:Pro:20.04:LTS / coin3
Package
- Name
- coin3
- Purl
- pkg:deb/ubuntu/coin3@4.0.0+ds-1build1?arch=source&distro=esm-apps/focal
Ubuntu:Pro:20.04:LTS / libxmltok
Package
- Name
- libxmltok
- Purl
- pkg:deb/ubuntu/libxmltok@1.2-4ubuntu0.20.04.1~esm4?arch=source&distro=esm-apps/focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.2-4ubuntu0.20.04.1~esm4
Affected versions
1.*
1.2-4
1.2-4ubuntu0.20.04.1~esm1
1.2-4ubuntu0.20.04.1~esm2
1.2-4ubuntu0.20.04.1~esm3
Ecosystem specific
{
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_version": "1.2-4ubuntu0.20.04.1~esm4",
"binary_name": "libxmltok1"
},
{
"binary_version": "1.2-4ubuntu0.20.04.1~esm4",
"binary_name": "libxmltok1-dbgsym"
},
{
"binary_version": "1.2-4ubuntu0.20.04.1~esm4",
"binary_name": "libxmltok1-dev"
}
]
}
Ubuntu:Pro:20.04:LTS / matanza
Package
- Name
- matanza
- Purl
- pkg:deb/ubuntu/matanza@0.13+ds2-1?arch=source&distro=esm-apps/focal
Ubuntu:Pro:20.04:LTS / swish-e
Package
- Name
- swish-e
- Purl
- pkg:deb/ubuntu/swish-e@2.4.7-6build2?arch=source&distro=esm-apps/focal
Ubuntu:Pro:20.04:LTS / xmlrpc-c
Package
- Name
- xmlrpc-c
- Purl
- pkg:deb/ubuntu/xmlrpc-c@1.33.14-8build2?arch=source&distro=esm-apps/focal
Ubuntu:22.04:LTS / cadaver
Package
- Name
- cadaver
- Purl
- pkg:deb/ubuntu/cadaver@0.23.3-2.1build1?arch=source&distro=jammy
Ubuntu:22.04:LTS / coin3
Package
- Name
- coin3
- Purl
- pkg:deb/ubuntu/coin3@4.0.0+ds-2?arch=source&distro=jammy
Ubuntu:22.04:LTS / libxmltok
Package
- Name
- libxmltok
- Purl
- pkg:deb/ubuntu/libxmltok@1.2-4?arch=source&distro=jammy
Ubuntu:22.04:LTS / matanza
Package
- Name
- matanza
- Purl
- pkg:deb/ubuntu/matanza@0.13+ds2-1?arch=source&distro=jammy
Ubuntu:22.04:LTS / swish-e
Package
- Name
- swish-e
- Purl
- pkg:deb/ubuntu/swish-e@2.4.7-6.1build1?arch=source&distro=jammy
Ubuntu:22.04:LTS / xmlrpc-c
Package
- Name
- xmlrpc-c
- Purl
- pkg:deb/ubuntu/xmlrpc-c@1.33.14-10?arch=source&distro=jammy
Ubuntu:Pro:22.04:LTS / libxmltok
Package
- Name
- libxmltok
- Purl
- pkg:deb/ubuntu/libxmltok@1.2-4ubuntu0.22.04.1~esm4?arch=source&distro=esm-apps/jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.2-4ubuntu0.22.04.1~esm4
Affected versions
1.*
1.2-4
1.2-4ubuntu0.22.04.1~esm1
1.2-4ubuntu0.22.04.1~esm2
1.2-4ubuntu0.22.04.1~esm3
Ecosystem specific
{
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_version": "1.2-4ubuntu0.22.04.1~esm4",
"binary_name": "libxmltok1"
},
{
"binary_version": "1.2-4ubuntu0.22.04.1~esm4",
"binary_name": "libxmltok1-dbgsym"
},
{
"binary_version": "1.2-4ubuntu0.22.04.1~esm4",
"binary_name": "libxmltok1-dev"
}
]
}
Ubuntu:24.04:LTS / cadaver
Package
- Name
- cadaver
- Purl
- pkg:deb/ubuntu/cadaver@0.24+dfsg-3build2?arch=source&distro=noble
Ubuntu:24.04:LTS / coin3
Package
- Name
- coin3
- Purl
- pkg:deb/ubuntu/coin3@4.0.2+ds-1.1ubuntu2?arch=source&distro=noble
Ubuntu:24.04:LTS / libxmltok
Package
- Name
- libxmltok
- Purl
- pkg:deb/ubuntu/libxmltok@1.2-4.1ubuntu2?arch=source&distro=noble
Ubuntu:24.04:LTS / matanza
Package
- Name
- matanza
- Purl
- pkg:deb/ubuntu/matanza@0.13+ds2-1build2?arch=source&distro=noble
Ubuntu:24.04:LTS / swish-e
Package
- Name
- swish-e
- Purl
- pkg:deb/ubuntu/swish-e@2.4.7-6.2build3?arch=source&distro=noble
Ubuntu:24.04:LTS / xmlrpc-c
Package
- Name
- xmlrpc-c
- Purl
- pkg:deb/ubuntu/xmlrpc-c@1.33.14-12build2?arch=source&distro=noble
Ubuntu:Pro:24.04:LTS / libxmltok
Package
- Name
- libxmltok
- Purl
- pkg:deb/ubuntu/libxmltok@1.2-4.1ubuntu2.24.0.4.1+esm2?arch=source&distro=esm-apps/noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.2-4.1ubuntu2.24.0.4.1+esm2
Ecosystem specific
{
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_version": "1.2-4.1ubuntu2.24.0.4.1+esm2",
"binary_name": "libxmltok1-dev"
},
{
"binary_version": "1.2-4.1ubuntu2.24.0.4.1+esm2",
"binary_name": "libxmltok1t64"
},
{
"binary_version": "1.2-4.1ubuntu2.24.0.4.1+esm2",
"binary_name": "libxmltok1t64-dbgsym"
}
]
}
Ubuntu:25.04 / cadaver
Package
- Name
- cadaver
- Purl
- pkg:deb/ubuntu/cadaver@0.26+dfsg-2?arch=source&distro=plucky
Ubuntu:25.04 / coin3
Package
- Name
- coin3
- Purl
- pkg:deb/ubuntu/coin3@4.0.3+ds-2?arch=source&distro=plucky
Ubuntu:25.04 / libxmltok
Package
- Name
- libxmltok
- Purl
- pkg:deb/ubuntu/libxmltok@1.2-4.1ubuntu4?arch=source&distro=plucky
Ubuntu:25.04 / matanza
Package
- Name
- matanza
- Purl
- pkg:deb/ubuntu/matanza@0.13+ds2-2?arch=source&distro=plucky
Ubuntu:25.04 / sitecopy
Package
- Name
- sitecopy
- Purl
- pkg:deb/ubuntu/sitecopy@1:0.16.6-16?arch=source&distro=plucky
Ubuntu:25.04 / swish-e
Package
- Name
- swish-e
- Purl
- pkg:deb/ubuntu/swish-e@2.4.7-6.3?arch=source&distro=plucky