Lucene search
Ubuntu.comUB:CVE-2022-23437HistoryJan 24, 2022 - 12:00 a.m.
CVE-2022-23437
2022-01-2400:00:00
ubuntu.com
ubuntu.com
12
0.004 Low
EPSS
Percentile
72.7%
There’s a vulnerability within the Apache Xerces Java (XercesJ) XML parser
when handling specially crafted XML document payloads. This causes, the
XercesJ XML parser to wait in an infinite loop, which may sometimes consume
system resources for prolonged duration. This vulnerability is present
within XercesJ version 2.12.1 and the previous versions.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | libxerces2-java | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | libxerces2-java | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | libxerces2-java | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | libxerces2-java | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | libxerces2-java | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | libxerces2-java | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | libxerces2-java | < any | UNKNOWN |
References
www.openwall.com/lists/oss-security/2022/01/24/3
launchpad.net/bugs/cve/CVE-2022-23437
lists.apache.org/thread/6pjwm10bb69kq955fzr1n0nflnjd27dl
nvd.nist.gov/vuln/detail/CVE-2022-23437
security-tracker.debian.org/tracker/CVE-2022-23437
www.cve.org/CVERecord?id=CVE-2022-23437
www.openwall.com/lists/oss-security/2022/01/24/3
Related
osv
osv
XML Injection in Xerces Java affects Nokogiri
2022-04-11 21:30:00
Infinite Loop in Apache Xerces Java
2022-01-27 16:13:07
ibm
ibm
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0503-1)
2022-02-19 00:00:00
openSUSE: Security Advisory for xerces-j2 (openSUSE-SU-2022:0500-1)
2022-02-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0542-1)
2022-02-22 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : xerces-j2 (EulerOS-SA-2022-1772)
2022-05-26 00:00:00
RHEL 6 : xerces-j2 (Unpatched Vulnerability)
2024-05-11 00:00:00
EulerOS 2.0 SP8 : xerces-j2 (EulerOS-SA-2022-1592)
2022-04-25 00:00:00
prion
prion
Design/Logic Flaw
2022-01-24 15:15:00
cve
cve
CVE-2022-23437
2022-01-24 15:15:09
redhatcve
redhatcve
CVE-2022-23437
2022-01-27 11:58:37
cvelist
cvelist
CVE-2022-23437 Infinite loop within Apache XercesJ xml parser
2022-01-24 00:00:00
github
github
XML Injection in Xerces Java affects Nokogiri
2022-04-11 21:30:00
Infinite Loop in Apache Xerces Java
2022-01-27 16:13:07
veracode
veracode
Denial Of Service (DoS)
2022-01-25 04:25:23
cnvd
cnvd
Apache Xerces Denial of Service Vulnerability
2022-01-26 00:00:00
debiancve
debiancve
CVE-2022-23437
2022-01-24 15:15:09
rubygems
rubygems
XML Injection in Xerces Java affects Nokogiri
2022-04-10 21:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00