CVE-2016-5300

概要

参考情報

• debian.org/security/2016/dsa-3597 · Third Party Advisory
• openwall.com/lists/oss-security/2016/06/04/4 · Mailing List
• openwall.com/lists/oss-security/2016/06/04/5 · Mailing List
• oracle.com/technetwork/security-advisory/cpujul2018-4258247.html · Patch
• oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html · Third Party Advisory
• securityfocus.com/bid/91159 · Third Party Advisory
• ubuntu.com/usn/USN-3010-1 · Third Party Advisory
• kc.mcafee.com/corporate/index
• lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E

libexpat のその他の脆弱性

• CVE-2026-76957高 7.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is simi…
• CVE-2026-76956高 7.5In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in bein…
• CVE-2026-66046高 7.5Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xml…
• CVE-2026-56412中 5.9libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls fr…
• CVE-2026-56411中 6.9xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.