EUVD-2016-6251

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

XML parser in Expat lacks entropy for hash initialization, causing denial of service via crafted identifiers.

Reporter	Title	Published	Views	Family All 117
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Network Time Protocol(NTP) affect WebSphere DataPower XC10 Appliance (CVE-2016-5300, CVE-2015-7704, CVE-2015-8138)	15 Jun 201807:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in expat (CVE-2012-6702 CVE-2016-5300).	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Open Source Expact affect Tivoli Network Manager IP Edition	17 Jun 201815:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Monitoring Basic Services component. (CVE-2012-6702, CVE-2016-5300)	17 Jun 201815:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Expat affect Intel (R) Manycore Platform Software Stack (MPSS) for Linux and Windows	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Expat XML Parser vulnerabilities in Prospect	17 Jun 201815:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Expat affect IBM Netezza Analytics	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple Expat vulnerabilities (CVE-2016-5300, CVE-2016-6702)	18 Jun 201801:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSource Expat XML Vulnerabilities affect IBM DB2 Net Search Extender for Linux, Unix and Windows	16 Jun 201813:43	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Tivoli Monitoring shipped with IBM Cloud Orchestrator Enterprise (CVE-2012-6702, CVE-2016-5300)	17 Jun 201822:33	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "d0290bc4-08f2-3a05-aaac-1532be7f9065",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "32ba7d15-5a5c-325d-a84b-b2c3d29a3560",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2016-5300.html
debian	www.debian.org/security/2016/dsa-3597
ubuntu	www.ubuntu.com/security/CVE-2016-5300
advisories	www.advisories.mageia.org/CVE-2016-5300.html
tenable	www.tenable.com/security/tns-2016-20
oracle	www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
openwall	www.openwall.com/lists/oss-security/2016/06/04/4
debian	www.debian.org/security/2016/dsa-3597
oracle	www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
securityfocus	www.securityfocus.com/bid/91159

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 27.8

EPSS0.0197