Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•12 views

MiracleLinux 7 : xerces-c-3.1.1-9.el7 (AXSA:2019-3675:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-3675:01 advisory. xerces-c: Stack overflow when parsing deeply nested DTD CVE-2016-4463 Tenable has extracted the preceding description block directly from the MiracleLinux...

7.5CVSS6.8AI score0.14138EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/12/28 12:00 a.m.•32 views

EulerOS 2.0 SP2 : xerces-c (EulerOS-SA-2018-1422)

According to the version of the xerces-c package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - xerces-c: Stack overflow when parsing deeply nested DTD CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description...

7.5CVSS6.6AI score0.14138EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2018/11/06 3:50 p.m.•16 views

xerces-c: Stack overflow when parsing deeply nested DTD

A stack exhaustion flaw was found in the way Xerces-C XML parser handled deeply nested DTDs. An attacker could potentially use this flaw to crash an application using Xerces-C by tricking it into processing specially crafted data...

7.5CVSS6.4AI score0.14138EPSS
SaveExploits0References5
OSV
OSV
•added 2016/07/08 7:59 p.m.•10 views

DEBIAN-CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

7.5CVSS6.8AI score0.14138EPSS
SaveExploits0References1
NVD
NVD
•added 2016/07/08 7:59 p.m.•26 views

CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

7.5CVSS8.3AI score0.14138EPSS
SaveExploits0References15
OSV
OSV
•added 2016/07/08 7:59 p.m.•21 views

CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

7.5CVSS7.4AI score
SaveExploits0References15
Prion
Prion
•added 2016/07/08 7:59 p.m.•31 views

Stack overflow

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

5CVSS7.2AI score0.14138EPSS
SaveExploits0References15Affected Software2
Cvelist
Cvelist
•added 2016/07/08 7:00 p.m.•35 views

CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

7.5AI score0.14138EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/08 12:00 a.m.•7 views

CVE-2016-4463: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

7.5CVSS6.8AI score0.14138EPSS
SaveExploits0References2
ArchLinux
ArchLinux
•added 2016/07/05 12:00 a.m.•53 views

xerces-c: denial of service

The Xerces-C XML parser fails to successfully parse a DTD that is deeply nested, and this causes a stack overflow, which makes a denial of service attack against many applications possible by an unauthenticated attacker...

5CVSS6.5AI score0.14138EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2009/08/11 6:30 p.m.•43 views

CVE-2009-1885

Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrat...

4.3CVSS7.2AI score0.05324EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/11 12:00 a.m.•4 views

CVE-2009-1885: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrat...

4.3CVSS8AI score0.05324EPSS
SaveExploits1References2
Rows per page
Query Builder