Use-after-free in Libxml2 - CVE-2016-5131

Vulnerability identifier: #VU33135

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-5131

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing vectors related to the XPointer range-to function. A remote attackers can cause a denial of service or execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Libxml2
Amazon Linux AMI
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Fedora
libxml2 (Alpine package)
libxml2 (Red Hat package)
libxml2
Flex System Integrated Management Module (IMM2)
System x Integrated Management Module (IMM2)
Flex System Chassis Management Module (CMM)
Integrated Management Module II (IMM2) for BladeCenter Systems
Data Computing Appliance (DCA)
IBM Observability with Instana
App Connect Enterprise Certified Container
IBM Flex System Fabric EN4093R 10Gb Scalable Switch
IBM Flex System EN2092 1Gb Ethernet Scalable Switch
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch
Flex System Fabric CN4093 10Gb ScSE firmware

Install update from vendor's website.

Libxml2 - update to 2.9.5
libxml2 (Alpine package) - update to 2.9.4-r1
Flex System Integrated Management Module (IMM2) - update to 1AOO84C-6.80
System x Integrated Management Module (IMM2) - update to 1AOO84C-6.80
Integrated Management Module II (IMM2) for BladeCenter Systems - update to 1AOO84C-6.80-bc
IBM Observability with Instana - update to 1.0.295
Flex System Chassis Management Module (CMM) - update to 2pet16c-2.5.12c
libxml2 (Red Hat package) - update to 2.9.1-6.el7.4
libxml2 - update to 2.9.4
libxml2 - addressed in versions 2.9.7-1.fc26, 2.9.7-1.fc27
Data Computing Appliance (DCA) - update to 4.3.0.0
App Connect Enterprise Certified Container - addressed in versions 5.0.1, 6.1.0
IBM Flex System Fabric EN4093R 10Gb Scalable Switch - update to 7.8.20.00
IBM Flex System EN2092 1Gb Ethernet Scalable Switch - update to 7.8.20.00
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch - update to 7.8.20.00
Flex System Fabric CN4093 10Gb ScSE firmware - update to 7.8.20.00

• http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html
• http://rhn.redhat.com/errata/RHSA-2016-1485.html
• http://www.debian.org/security/2016/dsa-3637
• http://www.securityfocus.com/bid/92053
• http://www.securitytracker.com/id/1036428
• http://www.securitytracker.com/id/1038623
• http://www.ubuntu.com/usn/USN-3041-1
• https://bugzilla.redhat.com/show_bug.cgi?id=1358641
• https://codereview.chromium.org/2127493002
• https://crbug.com/623378
• https://security.gentoo.org/glsa/201610-09
• https://security.gentoo.org/glsa/201701-37
• https://source.android.com/security/bulletin/2017-05-01
• https://support.apple.com/HT207141
• https://support.apple.com/HT207142
• https://support.apple.com/HT207143
• https://support.apple.com/HT207170

• Use-after-free in Libxml
• Amazon Linux AMI update for libxml2
• Use-after-free in libxml2 (Alpine package)
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Red Hat Enterprise Linux 7 update for libxml2
• Multiple vulnerabilities in IBM Flex System Chassis Management Module (CMM)
• Multiple vulnerabilities in IBM Flex System switch firmware products
• Arch Linux update for libxml2
• Fedora 27 update for libxml2
• Fedora 26 update for libxml2
• Multiple vulnerabilities in IBM Observability with Instana (OnPrem)
• Multiple vulnerabilities in IBM Integrated Management Module II (IMM2)