Описание
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| xerces-c | fixed | 3.2.4+debian-1 | package | |
| xerces-c | fixed | 3.2.3+debian-3+deb11u1 | bullseye | package |
Примечания
https://github.com/apache/xerces-c/pull/51
https://issues.apache.org/jira/browse/XERCESC-2241
Fixed by: https://github.com/apache/xerces-c/commit/1296a40db07308dbaac32494469f609b00cdfaf3 (v3.2.4)
EPSS
Процентиль: 77%
0.01084
Низкий
Связанные уязвимости
CVSS3: 8.2
ubuntu
больше 1 года назад
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
CVSS3: 8.8
redhat
больше 1 года назад
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
CVSS3: 8.2
nvd
больше 1 года назад
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
EPSS
Процентиль: 77%
0.01084
Низкий