CVE-2016-0729
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri...
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
- Record
CVE-2016-0729- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
- Record
CVE-2016-0729- Updated
- 2026-11-02
EUVDEUVD-2016-0758 No score
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
- Record
EUVD-2016-0758- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-432r-553m-gq3p
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri...
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
- Record
GHSA-432r-553m-gq3p- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
- Record
CVE-2016-0729- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-0729
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
- Record
DEBIAN-CVE-2016-0729- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2016-0729
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
- Record
UBUNTU-CVE-2016-0729- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2016-0088 No score
Updated xerces-c packages fix CVE-2016-0729
Updated xerces-c packages fix security vulnerability:
The Xerces-C XML parser mishandles certain kinds of malformed input documents, resulting in buffer overlows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. The bugs allow for a denial of service attack in many applications by an unauthenticated attacker, and could conceivably result in remote code execution (CVE-2016-0729).
- Record
MGASA-2016-0088- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10039-1 No score
libxerces-c-3_1-3.1.4-1.3 on GA media
These are all security issues fixed in the libxerces-c-3_1-3.1.4-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10039-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:1026-1 No score
Security update for xerces-c
This update for xerces-c fixes the following security issue:
- CVE-2016-0729: Fixed mishandling certain kinds of malformed input documents, that resulted in buffer overlows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. (bsc#966822)
- Record
SUSE-SU-2016:1026-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xerces-cDebian:12 |
before 3.1.3+debian-1 | 3.1.3+debian-1 |
xerces-cDebian:13 |
before 3.1.3+debian-1 | 3.1.3+debian-1 |
xerces-cDebian:14 |
before 3.1.3+debian-1 | 3.1.3+debian-1 |
xerces-cDebian:6.0 |
before 3.1.1-1+deb6u2, plus listed versions 3.1.1-1 |
3.1.1-1+deb6u2 |
xerces-cDebian:7 |
before 3.1.1-3+deb7u2, plus listed versions 3.1.1-33.1.1-3+deb7u1 |
3.1.1-3+deb7u2 |
xerces-cDebian:8 |
before 3.1.1-5.1+deb8u1, plus listed versions 3.1.1-5.1 |
3.1.1-5.1+deb8u1 |
xerces-cMageia:5 |
before 3.1.2-1.1.mga5 | 3.1.2-1.1.mga5 |
xerces-cRed Hat:enterprise_linux:7::client |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-develRed Hat:enterprise_linux:7::client |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xerces-c-docRed Hat:enterprise_linux:7::client |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-cRed Hat:enterprise_linux:7::computenode |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-develRed Hat:enterprise_linux:7::computenode |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-docRed Hat:enterprise_linux:7::computenode |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-cRed Hat:enterprise_linux:7::server |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-develRed Hat:enterprise_linux:7::server |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-docRed Hat:enterprise_linux:7::server |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-cRed Hat:enterprise_linux:7::workstation |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-develRed Hat:enterprise_linux:7::workstation |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-c-docRed Hat:enterprise_linux:7::workstation |
before 0:3.1.1-8.el7_2 | 0:3.1.1-8.el7_2 |
xerces-cSUSE:Linux Enterprise Desktop 12 |
before 3.1.1-7.1 | 3.1.1-7.1 |
xerces-cSUSE:Linux Enterprise Desktop 12 SP1 |
before 3.1.1-7.1 | 3.1.1-7.1 |
xerces-cSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 3.1.1-7.1 | 3.1.1-7.1 |
xerces-cSUSE:Linux Enterprise Server 12 SP1 |
before 3.1.1-7.1 | 3.1.1-7.1 |
xerces-cSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 3.1.1-7.1 | 3.1.1-7.1 |
xerces-cSUSE:Linux Enterprise Workstation Extension 12 |
before 3.1.1-7.1 | 3.1.1-7.1 |
xerces-cUbuntu:14.04:LTS |
before 3.1.1-5.1+deb8u1build0.14.04.1, plus listed versions 3.1.1-33.1.1-3ubuntu13.1.1-43.1.1-53.1.1-5.1~build0.14.04.1 |
3.1.1-5.1+deb8u1build0.14.04.1 |
xerces-copenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 3.1.4-1.3 | 3.1.4-1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-0729 is a critical vulnerability (CVSS 9.8) in Fedoraproject Fedora, published February 25, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.12%, the 95th percentile. Fixed in xerces-c 3.1.3+debian-1.
References
lists.fedoraproject.org/pipermail/package-announce/2016-April/182597.html
packetstormsecurity.com/files/135949/Apache-Xerces-C-XML-Parser-Buffer-Overflow.html
securitytracker.com/id/1035113
securityfocus.com/bid/83423
xerces.apache.org/xerces-c/secadv/CVE-2016-0729.txt
svn.apache.org/viewvc?view=revision&revision=1727978
Show 31 moreShow less
lists.opensuse.org/opensuse-updates/2016-04/msg00086.html
oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
security.gentoo.org/glsa/201612-46
issues.apache.org/jira/browse/XERCESC-2061
debian.org/security/2016/dsa-3493
nvd.nist.gov/vuln/detail/CVE-2016-0729
github.com/advisories/GHSA-432r-553m-gq3p
security-tracker.debian.org/tracker/CVE-2016-0729
advisories.mageia.org/MGASA-2016-0088.html
bugs.mageia.org/show_bug.cgi?id=17820
access.redhat.com/errata/RHSA-2016:0430
bugzilla.redhat.com/show_bug.cgi?id=1312231
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0430.json
cve.org/CVERecord?id=CVE-2016-0729
suse.com/support/update/announcement/2016/suse-su-20161026-1
bugzilla.suse.com/966822
ubuntu.com/security/CVE-2016-0729
marc.info?l=oss-security&m=145641008814590&w=2