Apache Xerces C++: Use-after-free on external DTD scan

🗓️ 29 Jan 2025 08:00:00Reported by MicrosoftType

Apache Xerces C++ has a use-after-free bug when scanning external DTDs.

Reporter	Title	Published	Views	Family All 54
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty, OpenSSL, libcurl, and Apache Xerces C++ XML parser may affect IBM Storage Protect for Virtual Environments: Data Protection for VMware	15 Apr 202502:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty, libcurl, Apache Xerces C++ XML parser, and Newtonsoft.Json may affect IBM Storage Protect for Virtual Environments: Data Protection for Hyper-V	18 Jun 202422:03	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Xerces C++ XML parser may affect IBM Storage Protect HSM for Windows	17 Jun 202415:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty and Apache Xerces C++ XML parser may affect IBM Storage Protect for Space Management	28 Jun 202408:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty, OpenSSL, libcurl, and Apache Xerces C++ XML parser may affect IBM Storage Protect Backup-Archive Client	18 Jun 202420:51	–	ibm
ATTACKERKB	CVE-2024-23807	29 Feb 202401:44	–	attackerkb
Tenable Nessus	Amazon Linux 2 : xerces-c (ALAS-2024-2476)	5 Mar 202400:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: xerces-c (CVE-2024-23807)	11 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: xerces-c (CVE-2024-23807)	30 Jan 202500:00	–	nessus
Tenable Nessus	Oracle Essbase Multiple Vulnerabilities (October 2024 CPU)	18 Oct 202400:00	–	nessus