CVE-2016-2099 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-2099 Interim 1 32 2025-11-05T04:32:55Z current 2021-05-30T13:39:06Z 2025-11-05T04:32:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-2099 Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2016-August/002228.html E-Mail link for SUSE-SU-2016:2154-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.0 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed Xerces-c libXerces-c-devel libXerces-c28 libxerces-c-3_1-3.1.1-12.3 libxerces-c-3_1-3.1.4-1.3 libxerces-c-3_1-3.1.4-1.40 libxerces-c-3_1-3.1.4-150200.10.11.1 libxerces-c-3_1-3.1.4-150200.10.14.1 libxerces-c-3_1-3.1.4-3.3.25 libxerces-c-3_1-3.1.4-8.1 libxerces-c-3_1-3.1.4-lp150.1.10 libxerces-c-3_1-3.1.4-lp152.4.4 libxerces-c-3_1-32bit-3.1.1-12.3 libxerces-c-3_1-32bit-3.1.4-1.3 libxerces-c-3_2-3.2.3-1.28 libxerces-c-3_2-3.2.3-150300.3.6.1 libxerces-c-3_2-3.2.3-150300.3.9.1 libxerces-c-3_3-3.3.0-160000.2.2 libxerces-c-devel-3.1.1-12.3 libxerces-c-devel-3.1.4-1.3 libxerces-c-devel-3.1.4-1.40 libxerces-c-devel-3.1.4-3.3.25 libxerces-c-devel-3.1.4-8.1 libxerces-c-devel-3.2.3-1.28 libxerces-c-devel-3.2.3-150300.3.6.1 libxerces-c-devel-3.2.3-150300.3.9.1 xerces-c-3.1.4-1.3 xerces-c-doc-3.1.4-1.3 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Desktop 12 SP2 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Desktop 12 SP2 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Desktop 12 SP4 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Desktop 12 SP4 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libxerces-c-3_1-3.1.4-1.40 as a component of SUSE Linux Enterprise Module for Basesystem 15 libxerces-c-devel-3.1.4-1.40 as a component of SUSE Linux Enterprise Module for Basesystem 15 libxerces-c-3_1-3.1.4-3.3.25 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libxerces-c-devel-3.1.4-3.3.25 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libxerces-c-3_1-3.1.4-8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libxerces-c-devel-3.1.4-8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libxerces-c-3_2-3.2.3-1.28 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libxerces-c-devel-3.2.3-1.28 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libxerces-c-3_2-3.2.3-1.28 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libxerces-c-devel-3.2.3-1.28 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libxerces-c-3_2-3.2.3-1.28 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libxerces-c-devel-3.2.3-1.28 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libxerces-c-3_2-3.2.3-150300.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libxerces-c-devel-3.2.3-150300.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libxerces-c-3_2-3.2.3-150300.3.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libxerces-c-devel-3.2.3-150300.3.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libxerces-c-3_1-3.1.4-150200.10.11.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP6 libxerces-c-3_1-3.1.4-150200.10.14.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP7 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP1 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP1 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP2 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP2 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP3 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP3 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP4 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP4 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP5 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Server 12 SP5 libxerces-c-3_3-3.3.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libxerces-c-3_1-3.1.1-12.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libxerces-c-3_1-32bit-3.1.1-12.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libxerces-c-devel-3.1.1-12.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libxerces-c-devel-3.1.1-12.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libxerces-c-devel-3.1.1-12.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libxerces-c-devel-3.1.1-12.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libxerces-c-devel-3.1.1-12.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libxerces-c-3_1-3.1.4-lp150.1.10 as a component of openSUSE Leap 15.0 libxerces-c-3_1-3.1.4-lp152.4.4 as a component of openSUSE Leap 15.2 libxerces-c-3_2-3.2.3-1.28 as a component of openSUSE Leap 15.3 libxerces-c-3_2-3.2.3-1.28 as a component of openSUSE Leap 15.4 libxerces-c-3_1-3.1.4-1.3 as a component of openSUSE Tumbleweed libxerces-c-3_1-32bit-3.1.4-1.3 as a component of openSUSE Tumbleweed libxerces-c-devel-3.1.4-1.3 as a component of openSUSE Tumbleweed xerces-c-3.1.4-1.3 as a component of openSUSE Tumbleweed xerces-c-doc-3.1.4-1.3 as a component of openSUSE Tumbleweed Xerces-c as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libXerces-c-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libXerces-c28 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document. CVE-2016-2099 SUSE Linux Enterprise Desktop 12 SP1:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Desktop 12 SP1:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Desktop 12 SP2:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Desktop 12 SP2:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Desktop 12 SP3:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Desktop 12 SP3:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Desktop 12 SP4:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Desktop 12 SP4:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise High Performance Computing 12 SP5:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise High Performance Computing 12 SP5:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Module for Basesystem 15:libxerces-c-3_1-3.1.4-1.40 SUSE Linux Enterprise Module for Basesystem 15:libxerces-c-devel-3.1.4-1.40 SUSE Linux Enterprise Module for Basesystem 15 SP1:libxerces-c-3_1-3.1.4-3.3.25 SUSE Linux Enterprise Module for Basesystem 15 SP1:libxerces-c-devel-3.1.4-3.3.25 SUSE Linux Enterprise Module for Basesystem 15 SP2:libxerces-c-3_1-3.1.4-8.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libxerces-c-devel-3.1.4-8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libxerces-c-3_2-3.2.3-1.28 SUSE Linux Enterprise Module for Basesystem 15 SP3:libxerces-c-devel-3.2.3-1.28 SUSE Linux Enterprise Module for Basesystem 15 SP4:libxerces-c-3_2-3.2.3-1.28 SUSE Linux Enterprise Module for Basesystem 15 SP4:libxerces-c-devel-3.2.3-1.28 SUSE Linux Enterprise Module for Basesystem 15 SP5:libxerces-c-3_2-3.2.3-1.28 SUSE Linux Enterprise Module for Basesystem 15 SP5:libxerces-c-devel-3.2.3-1.28 SUSE Linux Enterprise Module for Basesystem 15 SP6:libxerces-c-3_2-3.2.3-150300.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:libxerces-c-devel-3.2.3-150300.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libxerces-c-3_2-3.2.3-150300.3.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:libxerces-c-devel-3.2.3-150300.3.9.1 SUSE Linux Enterprise Module for Legacy 15 SP6:libxerces-c-3_1-3.1.4-150200.10.11.1 SUSE Linux Enterprise Module for Legacy 15 SP7:libxerces-c-3_1-3.1.4-150200.10.14.1 SUSE Linux Enterprise Server 12 SP1:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Server 12 SP1:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Server 12 SP2:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Server 12 SP2:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Server 12 SP3:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Server 12 SP3:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Server 12 SP4:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Server 12 SP4:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Server 12 SP5:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Server 12 SP5:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Server 16.0:libxerces-c-3_3-3.3.0-160000.2.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxerces-c-3_1-3.1.1-12.3 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxerces-c-3_1-32bit-3.1.1-12.3 SUSE Linux Enterprise Software Development Kit 12 SP1:libxerces-c-devel-3.1.1-12.3 SUSE Linux Enterprise Software Development Kit 12 SP2:libxerces-c-devel-3.1.1-12.3 SUSE Linux Enterprise Software Development Kit 12 SP3:libxerces-c-devel-3.1.1-12.3 SUSE Linux Enterprise Software Development Kit 12 SP4:libxerces-c-devel-3.1.1-12.3 SUSE Linux Enterprise Software Development Kit 12 SP5:libxerces-c-devel-3.1.1-12.3 openSUSE Leap 15.0:libxerces-c-3_1-3.1.4-lp150.1.10 openSUSE Leap 15.2:libxerces-c-3_1-3.1.4-lp152.4.4 openSUSE Leap 15.3:libxerces-c-3_2-3.2.3-1.28 openSUSE Leap 15.4:libxerces-c-3_2-3.2.3-1.28 openSUSE Tumbleweed:libxerces-c-3_1-3.1.4-1.3 openSUSE Tumbleweed:libxerces-c-3_1-32bit-3.1.4-1.3 openSUSE Tumbleweed:libxerces-c-devel-3.1.4-1.3 openSUSE Tumbleweed:xerces-c-3.1.4-1.3 openSUSE Tumbleweed:xerces-c-doc-3.1.4-1.3 SUSE Linux Enterprise Software Development Kit 11 SP4:Xerces-c SUSE Linux Enterprise Software Development Kit 11 SP4:libXerces-c-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libXerces-c28 moderate 10 AV:N/AC:L/Au:N/C:C/I:C/A:C 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H