CVE-2016-3627

The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.

Date published : 2016-05-17

http://www.securityfocus.com/bid/84992

http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html