CVE-2016-9598: Red Hat JBoss Core Services

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document. NOTE: this vulnerability exists because of a missing fix for CVE-2016-4483.

Affected products

• Red Hat JBoss Core Services: affected versions not specified
• Xmlsoft LIBXML2: before 2.9.4 (fixed in 2.9.4)

Published 2018-08-16. Last modified 2026-06-17.