IBM Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Open Source XMLsoft Libxml2 Vulnerabilities (CVE-2016-4483)

libxml2 is vulnerable to a denial of service, caused by an out-of-bounds read when parsing a specially crafted XML file if recover mode is used. By persuading a victim to open a specially crafted XML file, a remote attacker could exploit this vulnerability to cause the application to crash.

CVE(s): CVE-2016-4483

Affected product(s) and affected version(s):

IBM Security Guardium Database Activity Monitor V10.0, 10.0.1, 10.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2dpcgt2
X-Force Database: http://ift.tt/2cX854V

from IBM Product Security Incident Response Team http://ift.tt/2dpcLDC