Поиск уязвимостей
Количество 26
Количество 26
ALT-PU-2023-8427
ALT-PU-2023-8427: package `libxerces-c` update to version 3.2.5-alt1
ALT-PU-2024-8078
ALT-PU-2024-8078: package `libxerces-c` update to version 3.2.5-alt1
CVE-2024-23807
The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4.
CVE-2024-23807
The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4.
CVE-2024-23807
The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4.
CVE-2024-23807
Apache Xerces C++: Use-after-free on external DTD scan
CVE-2024-23807
The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contai ...
CVE-2018-1311
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.
CVE-2018-1311
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.
CVE-2018-1311
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.
CVE-2018-1311
CVE-2018-1311
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-fre ...
GHSA-8582-h585-f568
The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4.
BDU:2024-01559
Уязвимость библиотеки синтаксического анализа XML Apache Xerces, связанная с использованием памяти после её освобождения, позволяющая нарушителю выполнить произвольный код
openSUSE-SU-2021:2958-1
Security update for xerces-c
openSUSE-SU-2021:1231-1
Security update for xerces-c
SUSE-SU-2024:0320-1
Security update for xerces-c
SUSE-SU-2024:0300-1
Security update for xerces-c
SUSE-SU-2024:0299-1
Security update for xerces-c
SUSE-SU-2021:2958-1
Security update for xerces-c
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2023-8427 ALT-PU-2023-8427: package `libxerces-c` update to version 3.2.5-alt1 | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2024-8078 ALT-PU-2024-8078: package `libxerces-c` update to version 3.2.5-alt1 | CVSS3: 9.8 | больше 2 лет назад | |
 | CVE-2024-23807 The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4. | CVSS3: 9.8 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-23807 The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4. | CVSS3: 8.1 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-23807 The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4. | CVSS3: 9.8 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-23807 Apache Xerces C++: Use-after-free on external DTD scan | CVSS3: 8.1 | 1% Низкий | 3 месяца назад |
| CVE-2024-23807 The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contai ... | CVSS3: 9.8 | 1% Низкий | больше 2 лет назад |
| CVE-2018-1311 The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. | CVSS3: 8.1 | 10% Низкий | почти 7 лет назад |
| CVE-2018-1311 The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. | CVSS3: 8.1 | 10% Низкий | почти 7 лет назад |
| CVE-2018-1311 The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. | CVSS3: 8.1 | 10% Низкий | почти 7 лет назад |
| CVSS3: 8.1 | 10% Низкий | больше 4 лет назад | |
| CVE-2018-1311 The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-fre ... | CVSS3: 8.1 | 10% Низкий | почти 7 лет назад |
| GHSA-8582-h585-f568 The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4. | CVSS3: 8.1 | 1% Низкий | больше 2 лет назад |
 | BDU:2024-01559 Уязвимость библиотеки синтаксического анализа XML Apache Xerces, связанная с использованием памяти после её освобождения, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | больше 2 лет назад |
 | openSUSE-SU-2021:2958-1 Security update for xerces-c | 10% Низкий | около 5 лет назад | |
| openSUSE-SU-2021:1231-1 Security update for xerces-c | 10% Низкий | около 5 лет назад | |
| SUSE-SU-2024:0320-1 Security update for xerces-c | 10% Низкий | почти 3 года назад | |
| SUSE-SU-2024:0300-1 Security update for xerces-c | 10% Низкий | почти 3 года назад | |
| SUSE-SU-2024:0299-1 Security update for xerces-c | 10% Низкий | почти 3 года назад | |
| SUSE-SU-2021:2958-1 Security update for xerces-c | 10% Низкий | около 5 лет назад |
Уязвимостей на страницу