ALT-PU-2017-3638

Высокий

ALT-PU-2017-3638: package tinyxml2 update to version 5.0.1-alt1

Источник

errata.altlinux.org

Дата публикации

09.10.2017

Дата обновления

09.10.2017

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades tinyxml2 to version 5.0.1-alt1.

Устраненные уязвимости2

BDU:2024-00003

Высокий 7.5

Дата публикации: 02.01.2024

Уязвимость функции TiXmlDeclaration::Parse() компонента tinyxmlparser.cpp XML-парсера TinyXML, позволяющая нарушителю вызвать отказ в обслуживании

CVSS 3.1

Высокий 7.5

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Высокий 7.8

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Complete

Ссылки

BDU:2024-00003 https://bdu.fstec.ru/vul/2024-00003

Ссылки1

ALT-PU-2017-3638 https://errata.altlinux.org/ALT-PU-2017-3638

Связанные уязвимости

CVE-2023-34194

CVSS3: 7.5

ubuntu

почти 3 года назад

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace.

CVE-2023-34194

CVSS3: 7.5

nvd

почти 3 года назад

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace.

CVE-2023-34194

CVSS3: 7.5

debian

почти 3 года назад

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML ...

SUSE-SU-2023:4958-1

suse-cvrf

почти 3 года назад

Security update for tinyxml

GHSA-h738-v27m-f6mw

CVSS3: 7.5

github

почти 3 года назад

StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace.