What’s Vulnerable › Vulnerabilities

CVE-2016-0718

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 13.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-05-26 · updated 2026-10-08
• Weakness: CWE-119

Description

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

Affected products

• macOS: from 10.11.0 through 10.11.5
• Canonical Ubuntu Linux: 12.04, 14.04, 16.04
• Debian Linux: 8.0
• libexpat project libexpat: before 2.2.0 — fixed in 2.2.0
• McAfee,LLC McAfee Policy Auditor: before 6.5.1 — fixed in 6.5.1
• Mozilla Firefox: before 48.0 — fixed in 48.0
• openSUSE Leap: 42.1
• Opensuse: 13.1, 13.2
• Python: from 2.7.0 before 2.7.15; from 3.3.0 before 3.3.7; from 3.4.0 before 3.4.7; from 3.5.0 before 3.5.4; from 3.6.0 before 3.6.2 — fixed in 2.7.15, 3.3.7, 3.4.7, 3.5.4, 3.6.2
• SUSE Linux Enterprise Debuginfo: 11-sp4
• SUSE Linux Enterprise Server 15 SP1: 12, 12-sp1
• SUSE Linux Enterprise Server: 11-sp4, 12, 12-sp1
• SUSE Linux Enterprise Software Development Kit: 11-sp4, 12, 12-sp1
• SUSE Studio onsite: 1.3

How to fix

Upgrade to a fixed version: libexpat project libexpat 2.2.0; McAfee,LLC McAfee Policy Auditor 6.5.1; Mozilla Firefox 48.0; Python 2.7.15, 3.3.7, 3.4.7, 3.5.4. Check the vendor advisory for mitigations.

References

• http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html
• http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html
• http://rhn.redhat.com/errata/RHSA-2016-2824.html
• http://seclists.org/fulldisclosure/2017/Feb/68
• http://support.eset.com/ca6333/
• http://www.debian.org/security/2016/dsa-3582

Get alerted when CVE-2016-0718 or the next vulnerability affects your stack