CVE-2016-3709
libxml2: The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es)...
CVE-2016-3709 is fixed in 5 products on 1 platform, first by libxml2 2.9.4+dfsg1-6.1ubuntu1.7, released July 28, 2022. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
6.1
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0132
70th percentile
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Incorrect server side include parsing can lead to XSS (CVE-2016-3709) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libxml2 · Debian 11.6 (bullseye) | 2.9.10+dfsg-6.7+deb11u5 | DLA-3878-1 | Sep 5, 2024 |
| libxml2 · Debian 12.15 (bookworm) | 2.9.12+dfsg-3 | DEBIAN-CVE-2016-3709 | Jul 28, 2022 |
| libxml2 · Debian 13.5 (trixie) | 2.9.12+dfsg-3 | DEBIAN-CVE-2016-3709 | Jul 28, 2022 |
| libxml2 · Debian 14 | 2.9.12+dfsg-3 | DEBIAN-CVE-2016-3709 | Jul 28, 2022 |
| libxml2 · RHEL 8 | 0:2.9.7-15.el8 | RHSA-2022:7715 | Nov 8, 2022 |
| libxml2 · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.7 | libxml2 2.9.4+dfsg1-6.1ubuntu1.7 | Jul 28, 2022 |
| libxml2 · Ubuntu 20.04 LTS (focal) | 2.9.10+dfsg-5ubuntu0.20.04.4 | libxml2 2.9.10+dfsg-5ubuntu0.20.04.4 | Jul 28, 2022 |
| libxml2 · almalinux 8 | 2.9.7-15.el8 | ALSA-2022:7715 | Nov 8, 2022 |
| libxml2 · ol 8 | 0:2.9.7-15.el8 | ELSA-2022-7715 | Nov 15, 2022 |
| libxml2 · rocky 8 | 0:2.9.7-15.el8 | RLSA-2022:7715 | Nov 8, 2022 |
| libxml2-devel · RHEL 8 | 0:2.9.7-15.el8 | RHSA-2022:7715 | Nov 8, 2022 |
| libxml2-devel · almalinux 8 | 2.9.7-15.el8 | ALSA-2022:7715 | Nov 8, 2022 |
| libxml2-devel · ol 8 | 0:2.9.7-15.el8 | ELSA-2022-7715 | Nov 15, 2022 |
| libxml2-utils · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.7 | libxml2-utils 2.9.4+dfsg1-6.1ubuntu1.7 | Jul 28, 2022 |
| libxml2-utils · Ubuntu 20.04 LTS (focal) | 2.9.10+dfsg-5ubuntu0.20.04.4 | libxml2-utils 2.9.10+dfsg-5ubuntu0.20.04.4 | Jul 28, 2022 |
| python-libxml2 · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.7 | python-libxml2 2.9.4+dfsg1-6.1ubuntu1.7 | Jul 28, 2022 |
| python-libxml2 · Ubuntu 20.04 LTS (focal) | 2.9.10+dfsg-5ubuntu0.20.04.4 | python-libxml2 2.9.10+dfsg-5ubuntu0.20.04.4 | Jul 28, 2022 |
| python3-libxml2 · RHEL 8 | 0:2.9.7-15.el8 | RHSA-2022:7715 | Nov 8, 2022 |
| python3-libxml2 · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.7 | python3-libxml2 2.9.4+dfsg1-6.1ubuntu1.7 | Jul 28, 2022 |
| python3-libxml2 · Ubuntu 20.04 LTS (focal) | 2.9.10+dfsg-5ubuntu0.20.04.4 | python3-libxml2 2.9.10+dfsg-5ubuntu0.20.04.4 | Jul 28, 2022 |
| python3-libxml2 · almalinux 8 | 2.9.7-15.el8 | ALSA-2022:7715 | Nov 8, 2022 |
| python3-libxml2 · ol 8 | 0:2.9.7-15.el8 | ELSA-2022-7715 | Nov 15, 2022 |