[SECURITY] [DLA 181-1] xerces-c security update

2015-03-2721:14:56

lists.debian.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

92.0%

JSON

Package : xerces-c
Version : 3.1.1-1+deb6u1
CVE ID : CVE-2015-0252
Debian Bug : 780827

Anton Rager and Jonathan Brossard from the Salesforce.com Product
Security Team and Ben Laurie of Google discovered a denial of service
vulnerability in xerces-c, a validating XML parser library for C++. The
parser mishandles certain kinds of malformed input documents, resulting
in a segmentation fault during a parse operation. An unauthenticated
attacker could use this flaw to cause an application using the
xerces-c library to crash.

OSVersionArchitecturePackageVersionFilename
Debian7armellibxerces-c3.1< 3.1.1-3+deb7u1libxerces-c3.1_3.1.1-3+deb7u1_armel.deb
Debian7i386libxerces-c-dev< 3.1.1-3+deb7u1libxerces-c-dev_3.1.1-3+deb7u1_i386.deb
Debian7s390libxerces-c-samples< 3.1.1-3+deb7u1libxerces-c-samples_3.1.1-3+deb7u1_s390.deb
Debian6i386libxerces-c-samples< 3.1.1-1+deb6u1libxerces-c-samples_3.1.1-1+deb6u1_i386.deb
Debian7amd64libxerces-c-dev< 3.1.1-3+deb7u1libxerces-c-dev_3.1.1-3+deb7u1_amd64.deb
Debian7powerpclibxerces-c-samples< 3.1.1-3+deb7u1libxerces-c-samples_3.1.1-3+deb7u1_powerpc.deb
Debian7s390xlibxerces-c-samples< 3.1.1-3+deb7u1libxerces-c-samples_3.1.1-3+deb7u1_s390x.deb
Debian7armhflibxerces-c-samples< 3.1.1-3+deb7u1libxerces-c-samples_3.1.1-3+deb7u1_armhf.deb
Debian6i386libxerces-c3.1< 3.1.1-1+deb6u1libxerces-c3.1_3.1.1-1+deb6u1_i386.deb
Debian7kfreebsd-amd64libxerces-c3.1< 3.1.1-3+deb7u1libxerces-c3.1_3.1.1-3+deb7u1_kfreebsd-amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	armel	libxerces-c3.1	< 3.1.1-3+deb7u1	libxerces-c3.1_3.1.1-3+deb7u1_armel.deb
Debian	7	i386	libxerces-c-dev	< 3.1.1-3+deb7u1	libxerces-c-dev_3.1.1-3+deb7u1_i386.deb
Debian	7	s390	libxerces-c-samples	< 3.1.1-3+deb7u1	libxerces-c-samples_3.1.1-3+deb7u1_s390.deb
Debian	6	i386	libxerces-c-samples	< 3.1.1-1+deb6u1	libxerces-c-samples_3.1.1-1+deb6u1_i386.deb
Debian	7	amd64	libxerces-c-dev	< 3.1.1-3+deb7u1	libxerces-c-dev_3.1.1-3+deb7u1_amd64.deb
Debian	7	powerpc	libxerces-c-samples	< 3.1.1-3+deb7u1	libxerces-c-samples_3.1.1-3+deb7u1_powerpc.deb
Debian	7	s390x	libxerces-c-samples	< 3.1.1-3+deb7u1	libxerces-c-samples_3.1.1-3+deb7u1_s390x.deb
Debian	7	armhf	libxerces-c-samples	< 3.1.1-3+deb7u1	libxerces-c-samples_3.1.1-3+deb7u1_armhf.deb
Debian	6	i386	libxerces-c3.1	< 3.1.1-1+deb6u1	libxerces-c3.1_3.1.1-1+deb6u1_i386.deb
Debian	7	kfreebsd-amd64	libxerces-c3.1	< 3.1.1-3+deb7u1	libxerces-c3.1_3.1.1-3+deb7u1_kfreebsd-amd64.deb