Apache Xerces-C++ Denial of Service Vulnerability

Apache Xerces is an XML syntax parser from the Apache Software Foundation.Apache Xerces-C++ is the language version. A security vulnerability exists in Apache Xerces-C++. A remote attacker can exploit this vulnerability by sending a specially crafted message to the XML service to cause a denial o...

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

DEBIAN-CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

Code injection

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

UBUNTU-CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

CVE-2012-0880

CVE-2012-0880 affects Apache Xerces-C++, allowing a remote attacker to cause a denial of service (CPU consumption) by sending a crafted XML message that triggers hash table collisions. Based on connected documents, impact is high (CVSS v3 base 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). remediatio...

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

CVE-2012-0880

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

PT-2017-5070

Name of the Vulnerable Software and Affected Versions: Apache Xerces-C++ affected versions not specified Description: The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a crafted message to an XML service. This crafted message causes hash tabl...

CVE-2012-0880: Undefined Security Weakness

Apache Xerces-C++ allows remote attackers to cause a denial of service CPU consumption via a crafted message sent to an XML service that causes hash table collisions...

EulerOS 2.0 SP1 : xerces-c (EulerOS-SA-2016-1004)

According to the version of the xerces-c package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered that the Xerces-C XML parser did not properly process certain XML input. By providing specially crafted XML data to an applicati...

GLSA-201612-46 : Xerces-C++: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-46 Xerces-C++: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xerces-C++. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process ...

Xerces-C++: Multiple vulnerabilities

Background Xerces-C++ is a validating XML parser written in a portable subset of C++. Description Multiple vulnerabilities have been discovered in Xerces-C++. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to process a specially crafte...

F5 BIG-IP - Apache Xerces vulnerability CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

F5 Networks BIG-IP : Apache Xerces vulnerability (K70191975)

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.CVE-2016-4463 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Soluti...

SOL70191975 - Apache Xerces vulnerability CVE-2016-4463

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

openSUSE Security Update : xerces-c (openSUSE-2016-1046)

xerces-c was updated to fix one security issue. This security issue was fixed : - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have...

SUSE SLED12 / SLES12 Security Update : xerces-c (SUSE-SU-2016:2154-1)

xerces-c was updated to fix one security issue. This security issue was fixed : - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have...