Red Hat Security AdvisoryRHSA-2018:3506
xerces-c security update
Released 2018-11-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) xerces-c-3.1.1-8.el7_5.1, xerces-c-devel-3.1.1-8.el7_5.1, xerces-c-doc-3.1.1-8.el7_5.1
- Red Hat Enterprise Linux Server EUS (v. 7.5) xerces-c-3.1.1-8.el7_5.1, xerces-c-3.1.1-8.el7_5.1.ppc
- Red Hat Enterprise Linux Server Optional EUS (v. 7.5) xerces-c-devel-3.1.1-8.el7_5.1, xerces-c-devel-3.1.1-8.el7_5.1.ppc, xerces-c-doc-3.1.1-8.el7_5.1
Fixes 1 record
Priority MEDIUM 48
Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.1425 · Published 2016-07-08 · Partial fix CWE-119
