Red Hat Security AdvisoryRHSA-2018:3335
xerces-c security update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) xerces-c-3.1.1-9.el7, xerces-c-devel-3.1.1-9.el7, xerces-c-doc-3.1.1-9.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xerces-c-3.1.1-9.el7, xerces-c-devel-3.1.1-9.el7, xerces-c-doc-3.1.1-9.el7
- Red Hat Enterprise Linux Server (v. 7) xerces-c-3.1.1-9.el7, xerces-c-3.1.1-9.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) xerces-c-devel-3.1.1-9.el7, xerces-c-devel-3.1.1-9.el7.ppc, xerces-c-doc-3.1.1-9.el7
- Red Hat Enterprise Linux Workstation (v. 7) xerces-c-3.1.1-9.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) xerces-c-devel-3.1.1-9.el7, xerces-c-doc-3.1.1-9.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) xerces-c-3.1.1-9.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) xerces-c-devel-3.1.1-9.el7, xerces-c-doc-3.1.1-9.el7
Fixes 1 record
Priority MEDIUM 48
Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.1425 · Published 2016-07-08 · Partial fix CWE-119
