CVE ID:	CVE-2016-4449
Description:	XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.
Test IDs:	1.3.6.1.4.1.25623.1.0.120708   1.3.6.1.4.1.25623.1.1.4.2017.2699.1   1.3.6.1.4.1.25623.1.1.4.2017.2700.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4449 http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html BugTraq ID: 90865 http://www.securityfocus.com/bid/90865 Debian Security Information: DSA-3593 (Google Search) https://www.debian.org/security/2016/dsa-3593 http://jvn.jp/en/jp/JVN17535578/index.html http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000066.html http://www.openwall.com/lists/oss-security/2016/05/25/2 RedHat Security Advisories: RHSA-2016:1292 https://access.redhat.com/errata/RHSA-2016:1292 RedHat Security Advisories: RHSA-2016:2957 http://rhn.redhat.com/errata/RHSA-2016-2957.html http://www.securitytracker.com/id/1036348 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722 http://www.ubuntu.com/usn/USN-2994-1