CVE-2016-3709
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
6.1 MediumFix available
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
1.31%Up 0.4 points since Jul 29, 2022
What each source reports
NVD Score used
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
CVE-2016-3709- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
CVE-2016-3709- Weakness
- CWE-79
- Updated
- 2026-11-02
EUVDEUVD-2016-4730 No score
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
EUVD-2016-4730- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4p43-98m8-qxmc
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
GHSA-4p43-98m8-qxmc- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVALPINE-CVE-2016-3709
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
ALPINE-CVE-2016-3709- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVAZL-10442
CVE-2016-3709 affecting package libxml2 for versions less than 2.10.4-1
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
AZL-10442- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
Show 19 moreShow less
OSVBELL-CVE-2016-3709
CVE-2016-3709 does not affect BellSoft software
- Record
BELL-CVE-2016-3709- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSV
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
CVE-2016-3709- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-3709
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
DEBIAN-CVE-2016-3709- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVJLSEC-2025-76
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
JLSEC-2025-76- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2022-1828
libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
Security Fix(es):
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.(CVE-2016-3709)
- Record
OESA-2022-1828- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2022-1829
libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
Security Fix(es):
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.(CVE-2016-3709)
- Record
OESA-2022-1829- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2022:7715
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2022:7715- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:4767
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2023:4767- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVRLSA-2022:7715
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Incorrect server side include parsing can lead to XSS (CVE-2016-3709)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.
- Record
RLSA-2022:7715- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-3709
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
- Record
UBUNTU-CVE-2016-3709- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVALSA-2022:7715 No score
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Incorrect server side include parsing can lead to XSS (CVE-2016-3709)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2022:7715- Updated
- 2026-11-02
OSVCLSA-2022-1667512639 No score
Fix CVE(s): CVE-2016-3709
- SECURITY UPDATE: Possible cross-site scripting vulnerability in libxml2
- debian/patches/CVE-2016-3709.patch: Revert commit 960f0e27 that has some problems
- CVE-2016-3709
- Fix parser termination from "Double hyphen within comment" error
- Record
CLSA-2022-1667512639- Updated
- 2026-11-02
OSVCLSA-2022-1668701552 No score
libxml2: Fix of CVE-2016-3709
- CVE-2016-3709: back to URI escape in server side includes
- Record
CLSA-2022-1668701552- Updated
- 2026-11-02
OSVCLSA-2022-1668701633 No score
libxml2: Fix of CVE-2016-3709
- CVE-2016-3709: back to URI escape in server side includes
- Record
CLSA-2022-1668701633- Updated
- 2026-11-02
OSVMGASA-2022-0290 No score
Updated libxml2 packages fix security vulnerability
It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to execute arbitrary code (CVE-2016-3709).
- Record
MGASA-2022-0290- Updated
- 2026-11-02
OSVSUSE-SU-2022:3717-1 No score
Security update for libxml2
This update for libxml2 fixes the following issues:
- CVE-2016-3709: Fixed possible XSS vulnerability (bsc#1201978).
- CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366).
- CVE-2022-40304: Fixed dict corruption caused by entity reference cycles (bsc#1204367).
- Record
SUSE-SU-2022:3717-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3871-1 No score
Security update for libxml2
This update for libxml2 fixes the following issues:
- CVE-2016-3709: Fixed possible XSS vulnerability (bsc#1201978).
- CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366).
- CVE-2022-40304: Fixed dict corruption caused by entity reference cycles (bsc#1204367).
- Record
SUSE-SU-2022:3871-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3665-1 No score
Security update for libxml2
This update for libxml2 fixes the following issues:
- CVE-2023-29469: Fixed not deterministic hashing of empty dict strings (bsc#1210412).
- CVE-2023-28484: Fixed NULL dereference in xmlSchemaFixupComplexType (bsc#1210411).
- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).
- CVE-2016-3709: Fixed cross-site scripting vulnerability in libxml (bsc#1201978).
- Record
SUSE-SU-2023:3665-1- Updated
- 2026-11-02
OSVUSN-5548-1 No score
libxml2 vulnerability
It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to execute arbitrary code.
- Record
USN-5548-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libxml2Alpine:v3.15 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
libxml2Alpine:v3.16 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
libxml2Alpine:v3.17 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
libxml2Alpine:v3.18 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
libxml2Alpine:v3.19 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
libxml2Alpine:v3.20 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
libxml2Alpine:v3.21 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
libxml2Alpine:v3.22 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
libxml2Alpine:v3.23 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
libxml2Alpine:v3.24 |
2.9.2 up to 2.9.11-r0 | 2.9.11-r0 |
Show 118 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libxml2AlmaLinux:8 |
before 2.9.7-15.el8 | 2.9.7-15.el8 |
libxml2-develAlmaLinux:8 |
before 2.9.7-15.el8 | 2.9.7-15.el8 |
python3-libxml2AlmaLinux:8 |
before 2.9.7-15.el8 | 2.9.7-15.el8 |
libxml2Azure Linux:2 |
before 2.10.4-1 | 2.10.4-1 |
libxml2TuxCare:Ubuntu:16.04 |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 |
libxml2-devTuxCare:Ubuntu:16.04 |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 |
libxml2-docTuxCare:Ubuntu:16.04 |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 |
libxml2-utilsTuxCare:Ubuntu:16.04 |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 |
python-libxml2TuxCare:Ubuntu:16.04 |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 |
libxml2TuxCare:CentOS:8.5 |
before 2.9.7-9.el8_4.2.tuxcare.els3 | 2.9.7-9.el8_4.2.tuxcare.els3 |
libxml2-develTuxCare:CentOS:8.5 |
before 2.9.7-9.el8_4.2.tuxcare.els3 | 2.9.7-9.el8_4.2.tuxcare.els3 |
libxml2-staticTuxCare:CentOS:8.5 |
before 2.9.7-9.el8_4.2.tuxcare.els3 | 2.9.7-9.el8_4.2.tuxcare.els3 |
python3-libxml2TuxCare:CentOS:8.5 |
before 2.9.7-9.el8_4.2.tuxcare.els3 | 2.9.7-9.el8_4.2.tuxcare.els3 |
libxml2TuxCare:CentOS:8.4 |
before 2.9.7-9.el8_4.2.tuxcare.els3 | 2.9.7-9.el8_4.2.tuxcare.els3 |
libxml2-develTuxCare:CentOS:8.4 |
before 2.9.7-9.el8_4.2.tuxcare.els3 | 2.9.7-9.el8_4.2.tuxcare.els3 |
libxml2-staticTuxCare:CentOS:8.4 |
before 2.9.7-9.el8_4.2.tuxcare.els3 | 2.9.7-9.el8_4.2.tuxcare.els3 |
python3-libxml2TuxCare:CentOS:8.4 |
before 2.9.7-9.el8_4.2.tuxcare.els3 | 2.9.7-9.el8_4.2.tuxcare.els3 |
libxml2Debian:12 |
before 2.9.12+dfsg-3 | 2.9.12+dfsg-3 |
libxml2Debian:13 |
before 2.9.12+dfsg-3 | 2.9.12+dfsg-3 |
libxml2Debian:14 |
before 2.9.12+dfsg-3 | 2.9.12+dfsg-3 |
libxml2Debian:11 |
before 2.9.10+dfsg-6.7+deb11u5, plus listed versions 2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u12.9.10+dfsg-6.7+deb11u22.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u4 |
2.9.10+dfsg-6.7+deb11u5 |
XML2_jllJulia |
before 2.9.12+0 | 2.9.12+0 |
libxml2Mageia:8 |
before 2.9.10-7.5.mga8 | 2.9.10-7.5.mga8 |
libxml2openEuler:20.03-LTS-SP1 |
before 2.9.10-29.oe1 | 2.9.10-29.oe1 |
libxml2openEuler:20.03-LTS-SP3 |
before 2.9.10-31.oe1 | 2.9.10-31.oe1 |
libxml2-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
libxml2-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
libxml2-develRed Hat:enterprise_linux:8::appstream |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
python3-libxml2-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
libxml2Red Hat:enterprise_linux:8::baseos |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
libxml2-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
libxml2-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
python3-libxml2Red Hat:enterprise_linux:8::baseos |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
python3-libxml2-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
libxml2-debuginfoRed Hat:rhel_eus:8.6::appstream |
before 0:2.9.7-13.el8_6.2 | 0:2.9.7-13.el8_6.2 |
libxml2-debugsourceRed Hat:rhel_eus:8.6::appstream |
before 0:2.9.7-13.el8_6.2 | 0:2.9.7-13.el8_6.2 |
libxml2-develRed Hat:rhel_eus:8.6::appstream |
before 0:2.9.7-13.el8_6.2 | 0:2.9.7-13.el8_6.2 |
python3-libxml2-debuginfoRed Hat:rhel_eus:8.6::appstream |
before 0:2.9.7-13.el8_6.2 | 0:2.9.7-13.el8_6.2 |
libxml2Red Hat:rhel_eus:8.6::baseos |
before 0:2.9.7-13.el8_6.2 | 0:2.9.7-13.el8_6.2 |
libxml2-debuginfoRed Hat:rhel_eus:8.6::baseos |
before 0:2.9.7-13.el8_6.2 | 0:2.9.7-13.el8_6.2 |
libxml2-debugsourceRed Hat:rhel_eus:8.6::baseos |
before 0:2.9.7-13.el8_6.2 | 0:2.9.7-13.el8_6.2 |
python3-libxml2Red Hat:rhel_eus:8.6::baseos |
before 0:2.9.7-13.el8_6.2 | 0:2.9.7-13.el8_6.2 |
python3-libxml2-debuginfoRed Hat:rhel_eus:8.6::baseos |
before 0:2.9.7-13.el8_6.2 | 0:2.9.7-13.el8_6.2 |
libxml2Rocky Linux:8 |
before 0:2.9.7-15.el8 | 0:2.9.7-15.el8 |
libxml2SUSE:OpenStack Cloud 9 |
before 2.9.4-46.59.2 | 2.9.4-46.59.2 |
python-libxml2SUSE:OpenStack Cloud 9 |
before 2.9.4-46.59.3 | 2.9.4-46.59.3 |
libxml2SUSE:OpenStack Cloud Crowbar 9 |
before 2.9.4-46.59.2 | 2.9.4-46.59.2 |
python-libxml2SUSE:OpenStack Cloud Crowbar 9 |
before 2.9.4-46.59.3 | 2.9.4-46.59.3 |
libxml2SUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 2.9.4-46.59.2 | 2.9.4-46.59.2 |
python-libxml2SUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 2.9.4-46.59.3 | 2.9.4-46.59.3 |
libxml2SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 2.9.4-46.59.2 | 2.9.4-46.59.2 |
libxml2SUSE:Linux Enterprise Server 12 SP2-BCL |
before 2.9.4-46.59.2 | 2.9.4-46.59.2 |
python-libxml2SUSE:Linux Enterprise Server 12 SP2-BCL |
before 2.9.4-46.59.3 | 2.9.4-46.59.3 |
libxml2SUSE:Linux Enterprise Server 12 SP3-BCL |
before 2.9.4-46.59.2 | 2.9.4-46.59.2 |
python-libxml2SUSE:Linux Enterprise Server 12 SP3-BCL |
before 2.9.4-46.59.3 | 2.9.4-46.59.3 |
libxml2SUSE:Linux Enterprise Server 12 SP4-LTSS |
before 2.9.4-46.59.2 | 2.9.4-46.59.2 |
python-libxml2SUSE:Linux Enterprise Server 12 SP4-LTSS |
before 2.9.4-46.59.3 | 2.9.4-46.59.3 |
libxml2SUSE:Linux Enterprise Server 12 SP5 |
before 2.9.4-46.59.2 | 2.9.4-46.59.2 |
python-libxml2SUSE:Linux Enterprise Server 12 SP5 |
before 2.9.4-46.59.3 | 2.9.4-46.59.3 |
libxml2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.9.4-46.59.2 | 2.9.4-46.59.2 |
python-libxml2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.9.4-46.59.3 | 2.9.4-46.59.3 |
libxml2SUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Module for Python 2 15 SP3 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Server 15-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Server 15-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Server 15 SP1-BCL |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Server 15 SP1-BCL |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Server 15 SP2-BCL |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Server 15 SP2-BCL |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Server for SAP Applications 15 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Server for SAP Applications 15 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Manager Proxy 4.1 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Manager Proxy 4.1 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Manager Retail Branch Server 4.1 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Manager Retail Branch Server 4.1 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Manager Server 4.1 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Manager Server 4.1 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Micro 5.1 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Micro 5.2 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Linux Enterprise Micro 5.2 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Enterprise Storage 6 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Enterprise Storage 6 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Enterprise Storage 7 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonSUSE:Enterprise Storage 7 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2openSUSE:Leap Micro 5.2 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonopenSUSE:Leap Micro 5.2 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2openSUSE:Leap 15.3 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonopenSUSE:Leap 15.3 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
python-libxml2-pythonopenSUSE:Leap 15.4 |
before 2.9.7-150000.3.51.1 | 2.9.7-150000.3.51.1 |
libxml2SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 2.9.4-46.65.1 | 2.9.4-46.65.1 |
libxml2SUSE:Linux Enterprise Server 12 SP5 |
before 2.9.4-46.65.1 | 2.9.4-46.65.1 |
python-libxml2SUSE:Linux Enterprise Server 12 SP5 |
before 2.9.4-46.65.1 | 2.9.4-46.65.1 |
libxml2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.9.4-46.65.1 | 2.9.4-46.65.1 |
python-libxml2SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.9.4-46.65.1 | 2.9.4-46.65.1 |
libxml2Ubuntu:Pro:16.04:LTS |
before 2.9.3+dfsg1-1ubuntu0.7+esm3, plus listed versions 2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1 Show 9 moreShow less2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm2 |
2.9.3+dfsg1-1ubuntu0.7+esm3 |
libxml2Ubuntu:18.04:LTS |
before 2.9.4+dfsg1-6.1ubuntu1.7, plus listed versions 2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1 Show 6 moreShow less2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.6 |
2.9.4+dfsg1-6.1ubuntu1.7 |
libxml2Ubuntu:20.04:LTS |
before 2.9.10+dfsg-5ubuntu0.20.04.4, plus listed versions 2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3 Show 6 moreShow less2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.3 |
2.9.10+dfsg-5ubuntu0.20.04.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-3709 is a medium vulnerability (CVSS 6.1) in Gnome Libxml2, published July 28, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 70th percentile. Fixed in libxml2 2.9.11-r0.
References
mail.gnome.org/archives/xml/2018-January/msg00010.html
lists.debian.org/debian-lts-announce/2024/09/msg00021.html
cert-portal.siemens.com/productcert/html/ssa-398330.html
nvd.nist.gov/vuln/detail/CVE-2016-3709
github.com/advisories/GHSA-4p43-98m8-qxmc
security.alpinelinux.org/vuln/CVE-2016-3709
Show 38 moreShow less
access.redhat.com/errata/RHSA-2022:7715
bugzilla.redhat.com/2112766
errata.almalinux.org/8/ALSA-2022-7715.html
docs.bell-sw.com/security/cves/CVE-2016-3709
errata.cloudlinux.com/ubuntu16-els/CLSA-2022-1667512639
security-tracker.debian.org/tracker/CVE-2016-3709
advisories.mageia.org/MGASA-2022-0290.html
bugs.mageia.org/show_bug.cgi?id=30712
ubuntu.com/security/notices/USN-5548-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1828
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7715.json
cve.org/CVERecord?id=CVE-2016-3709
errata.rockylinux.org/RLSA-2022:7715
suse.com/support/update/announcement/2022/suse-su-20223717-1
bugzilla.suse.com/1201978