Lucene search

K
mageiaGentoo FoundationMGASA-2024-0014
HistoryJan 18, 2024 - 2:50 a.m.

Updated tinyxml packages fix a security vulnerability

2024-01-1802:50:39
Gentoo Foundation
advisories.mageia.org
8
tinyxml
security vulnerability
stringequal

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.2%

The updated packages fix a security vulnerability: StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a ‘\0’ located after whitespace. (CVE-2023-34194)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchtinyxml< 2.6.2-14.1tinyxml-2.6.2-14.1.mga9

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.2%