Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2014-2194

Критический

ALT-PU-2014-2194: package tinyxml update to version 2.6.2-alt1

Источник
errata.altlinux.org
Дата публикации
25.09.2014
Дата обновления
05.04.2024
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades tinyxml to version 2.6.2-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2

CVSS3: 4.4
redhat
больше 8 лет назад

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2

CVSS3: 9.8
nvd
больше 8 лет назад

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2

CVSS3: 9.8
debian
больше 8 лет назад

TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::P ...

CVSS3: 9.8
github
больше 4 лет назад

** DISPUTED ** TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2.