Read the docs
Red Hat Security Advisory

RHSA-2020:0702

xerces-c security update

Released 2020-03-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2018-01214 CVE-2018-1311 · GHSA-7rpp-hwhj-9hv8

Use after free in Apache Xerces-C

Priority MEDIUM 47

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.09503 Published 2019-12-18 Partial fix CWE-416