Vulnerability DatabaseCVE-2016-4483
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2016-4483
Published:April 11, 2017
Updated:May 17, 2026
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
Related Resources (17)
http://www.openwall.com/lists/oss-security/2016/06/07/5
https://www.tenable.com/security/tns-2016-18
http://www.debian.org/security/2016/dsa-3593
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
http://www.securityfocus.com/bid/90013
http://rhn.redhat.com/errata/RHSA-2016-2957.html
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
https://access.redhat.com/security/cve/CVE-2016-4483
http://www.securitytracker.com/id/1036348
https://people.canonical.com/~ubuntu-security/cve/CVE-2016-4483
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
https://security-tracker.debian.org/tracker/CVE-2016-4483
https://security.gentoo.org/glsa/201701-37
http://www.openwall.com/lists/oss-security/2016/06/07/4
https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd
http://www.openwall.com/lists/oss-security/2016/05/03/8
http://www.openwall.com/lists/oss-security/2016/05/04/7
Do you need more information?
Contact Us
CVSS v4
Base Score:
8.7
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
NONE
Vulnerable System Integrity
NONE
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Weakness Type (CWE)
Deserialization of Untrusted Data
CWE-502
EPSS
Base Score:
1.27