Lucene search

K
osvGoogleOSV:DLA-181-1
HistoryMar 27, 2015 - 12:00 a.m.

xerces-c - security update

2015-03-2700:00:00
Google
osv.dev
13

EPSS

0.041

Percentile

92.3%

Anton Rager and Jonathan Brossard from the Salesforce.com Product
Security Team and Ben Laurie of Google discovered a denial of service
vulnerability in xerces-c, a validating XML parser library for C++. The
parser mishandles certain kinds of malformed input documents, resulting
in a segmentation fault during a parse operation. An unauthenticated
attacker could use this flaw to cause an application using the
xerces-c library to crash.

For Debian 6 Squeeze, these issues have been fixed in xerces-c version 3.1.1-1+deb6u1