CVE-2016-4483

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and…

published April 11, 2017

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06165 · 93.4th percentile
Published
2017-04-11T16:00Z
EPSS history
Timeline
  • 11 APR 16:00Z
    The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and…
    cvelistv5