Is CVE-2016-1762 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 6%.

What products does CVE-2016-1762 affect?

Tracked products affected include Ubuntu. Check the version you run to see whether it is affected.

How do I fix CVE-2016-1762?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2016-1762

Q: What is CVE-2016-1762?

CVE-2016-1762 is a high-severity software vulnerability (Memory corruption) with a CVSS score of 8.1. The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

HIGH severity · CVSS 8.1 · Memory corruption

8.1CVSS HIGH

Summary

The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionRequired

Confidentiality impactHigh

Integrity impactNone

Availability impactHigh

Exploit probability (EPSS)6%

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Affected products we track (1)

Ubuntu

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.htmlAdvisory
http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.htmlAdvisory
http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.htmlAdvisory
http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlAdvisory
http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.htmlAdvisory
http://rhn.redhat.com/errata/RHSA-2016-2957.htmlAdvisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlAdvisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlAdvisory