Red Hat Security AdvisoryRHSA-2016:0430
xerces-c security update
Released 2016-03-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) xerces-c-3.1.1-8.el7_2, xerces-c-devel-3.1.1-8.el7_2, xerces-c-doc-3.1.1-8.el7_2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xerces-c-3.1.1-8.el7_2, xerces-c-devel-3.1.1-8.el7_2, xerces-c-doc-3.1.1-8.el7_2
- Red Hat Enterprise Linux Server (v. 7) xerces-c-3.1.1-8.el7_2, xerces-c-3.1.1-8.el7_2.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) xerces-c-devel-3.1.1-8.el7_2, xerces-c-devel-3.1.1-8.el7_2.ppc, xerces-c-doc-3.1.1-8.el7_2
- Red Hat Enterprise Linux Workstation (v. 7) xerces-c-3.1.1-8.el7_2
- Red Hat Enterprise Linux Workstation Optional (v. 7) xerces-c-devel-3.1.1-8.el7_2, xerces-c-doc-3.1.1-8.el7_2
Fixes 1 record
Priority MEDIUM 54
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segment…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09115 · Published 2016-04-07 · Partial fix CWE-119
