TencentOS Server 4: xerces-c (TSSA-2024:0453)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0453 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CBL Mariner 2.0 Security Update: xerces-c (CVE-2024-23807)

The version of xerces-c installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23807 advisory. - The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered...

CVE-2024-23807 affecting package xerces-c for versions less than 3.2.4-2

CVE-2024-23807 affecting package xerces-c for versions less than 3.2.4-2. A patched version of the package is available...

Oracle Linux 7 : xerces-c (ELSA-2024-8795)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8795 advisory. 3.1.1-10.0.1 - back port fix for CVE-2023-37536 Orabug: 37241079 Tenable has extracted the preceding description block directly from the Oracle Linux security...

CVE-2017-12627

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions...

CVE-2004-1575

The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service CPU consumption via XML attributes in a crafted XML document...

CVE-2004-1575

The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service CPU consumption via XML attributes in a crafted XML document...