Red Hat Security AdvisoryRHSA-2015:1193
xerces-c security update
Released 2015-06-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) xerces-c-3.1.1-7.el7_1, xerces-c-devel-3.1.1-7.el7_1, xerces-c-doc-3.1.1-7.el7_1
- Red Hat Enterprise Linux Server (v. 7) xerces-c-3.1.1-7.ael7b_1, xerces-c-3.1.1-7.el7_1, xerces-c-3.1.1-7.el7_1.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) xerces-c-devel-3.1.1-7.ael7b_1, xerces-c-devel-3.1.1-7.el7_1, xerces-c-devel-3.1.1-7.el7_1.ppc +2
- Red Hat Enterprise Linux Workstation (v. 7) xerces-c-3.1.1-7.el7_1
- Red Hat Enterprise Linux Workstation Optional (v. 7) xerces-c-devel-3.1.1-7.el7_1, xerces-c-doc-3.1.1-7.el7_1
Fixes 1 record
Priority MEDIUM 50
internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.38722 · Published 2015-03-24 · Partial fix CWE-20
