CVE-2016-9598: Out-of-bounds Read

August 16, 2018 (updated November 16, 2020)

libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document. NOTE: this vulnerability exists because of a missing fix for CVE-2016-4483.

References

access.redhat.com/errata/RHSA-2018:2486
bugzilla.redhat.com/show_bug.cgi?id=1408306
nvd.nist.gov/vuln/detail/CVE-2016-9598

Code Behaviors & Features

Detect and mitigate CVE-2016-9598 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →