Red Hat Security AdvisoryRHSA-2024:8795
xerces-c security update
Released 2024-11-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) xerces-c-3.1.1-10.el7_9.1, xerces-c-3.1.1-10.el7_9.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) xerces-c-devel-3.1.1-10.el7_9.1, xerces-c-devel-3.1.1-10.el7_9.1.ppc, xerces-c-doc-3.1.1-10.el7_9.1
Fixes 1 record
Priority MEDIUM 44
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0193 · Published 2023-10-11 · Partial fix CWE-680
