CVE:CVE-2016-3705
CNNVD:CNNVD-201605-100
libxml2是开源的一个用来解析XML文档的函数库。它用C语言写成，并且能为多种语言所调用，例如C语言，C++，XSH。
libxml2 2.9.3版本存在输入验证错误漏洞，该漏洞源于程序没有正确记录递归深度。攻击者可借助包含大量嵌套实体引用的XML文档利用该漏洞造成拒绝服务。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,16.04,and avoid the version 12.04,14.04,15.10,16.04; Upgrade xmlsoft libxml2 to a higher version than 2.9.3,and avoid the version 2.9.3; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade hp icewall_federation_agent to a higher version than 3.0,and avoid the version 3.0; Upgrade hp icewall_file_manager to a higher version than 3.0,and avoid the version 3.0; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1