CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

EulerOS 2.0 SP1 : xerces-c (EulerOS-SA-2016-1004)

According to the version of the xerces-c package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered that the Xerces-C XML parser did not properly process certain XML input. By providing specially crafted XML data to an applicati...

GLSA-201612-46 : Xerces-C++: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-46 Xerces-C++: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xerces-C++. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process ...

Xerces-C++: Multiple vulnerabilities

Background Xerces-C++ is a validating XML parser written in a portable subset of C++. Description Multiple vulnerabilities have been discovered in Xerces-C++. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to process a specially crafte...

F5 BIG-IP - Apache Xerces vulnerability CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

F5 Networks BIG-IP : Apache Xerces vulnerability (K70191975)

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.CVE-2016-4463 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Soluti...

SOL70191975 - Apache Xerces vulnerability CVE-2016-4463

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

openSUSE Security Update : xerces-c (openSUSE-2016-1046)

xerces-c was updated to fix one security issue. This security issue was fixed : - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have...

SUSE SLED12 / SLES12 Security Update : xerces-c (SUSE-SU-2016:2154-1)

xerces-c was updated to fix one security issue. This security issue was fixed : - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have...

SUSE-SU-2016:2154-1 Security update for xerces-c

xerces-c was updated to fix one security issue. This security issue was fixed: - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have...

FreeBSD : xercesi-c3 -- multiple vulnerabilities (cb09a7aa-5344-11e6-a7bd-14dae9d210b8)

Apache reports : The Xerces-C XML parser fails to successfully parse a DTD that is deeply nested, and this causes a stack overflow, which makes a denial of service attack against many applications possible by an unauthenticated attacker. Also, CVE-2016-2099: Use-after-free vulnerability in...

The vulnerability of the Xerces C++ library allows a hacker to trigger a service failure.

The vulnerability of the Xerces C++ library arises from buffer overflows in the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures by using embedded DTD files...

SOL04253390 - Apache Xerces vulnerability CVE-2016-2099

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

openSUSE Security Update : xerces-c (openSUSE-2016-876)

This update for xerces-c fixes the following issues : - CVE-2016-4463 Apache Xerces-C XML Parser Crashes on Malformed DT boo985860 - CVE-2016-2099 Exception handling mistake causing use after free boo979208 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

Fedora 24 : xerces-c (2016-9284772686)

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 23 : xerces-c (2016-d2d6890690)

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 23 : mingw-xerces-c (2016-87e8468465)

MinGW cross compiled xerces-c 3.1.4, fixing CVE-2016-0729, CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 22 : xerces-c (2016-84373c5f4f)

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 22 : mingw-xerces-c (2016-7615febbd6)

MinGW cross compiled xerces-c 3.1.4, fixing CVE-2016-0729, CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 24 : mingw-xerces-c (2016-0a061f6dd9)

MinGW cross compiled xerces-c 3.1.4, fixing CVE-2016-0729, CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...