Lucene search
Ubuntu.comUB:CVE-2023-37536HistoryOct 11, 2023 - 12:00 a.m.
CVE-2023-37536
2023-10-1100:00:00
ubuntu.com
ubuntu.com
11
integer overflow xerces-c++ bigfix platform out-of-bound access http request unix
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.0%
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote
attackers to cause out-of-bound access via HTTP request.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | xerces-c | < 3.2.0+debian-2ubuntu0.1~esm3 | UNKNOWN |
| ubuntu | 20.04 | noarch | xerces-c | < 3.2.2+debian-1ubuntu0.2 | UNKNOWN |
| ubuntu | 22.04 | noarch | xerces-c | < 3.2.3+debian-3ubuntu0.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | xerces-c | < 3.1.1-5.1+deb8u4ubuntu0.1~esm2 | UNKNOWN |
| ubuntu | 16.04 | noarch | xerces-c | < 3.1.3+debian-1ubuntu0.1~esm3 | UNKNOWN |
Related
nessus
nessus
Fedora 37 : mingw-xerces-c (2023-1332ed94a7)
2023-10-23 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : xerces-c (SUSE-SU-2023:4715-1)
2023-12-12 00:00:00
SUSE SLES12 Security Update : xerces-c (SUSE-SU-2023:4543-1)
2023-11-25 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4715-1)
2023-12-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4543-1)
2023-11-27 00:00:00
Fedora: Security Advisory for mingw-xerces-c (FEDORA-2023-1332ed94a7)
2023-10-24 00:00:00
prion
prion
Integer overflow
2023-10-11 07:15:00
osv
osv
xerces-c - security update
2023-12-31 00:00:00
xerces-c vulnerabilities
2024-01-18 18:21:32
nvd
nvd
CVE-2023-37536
2023-10-11 07:15:10
fedora
fedora
[SECURITY] Fedora 37 Update: mingw-xerces-c-3.2.4-1.fc37
2023-10-23 01:25:07
[SECURITY] Fedora 38 Update: xerces-c-3.2.5-1.fc38
2023-12-31 01:20:21
[SECURITY] Fedora 39 Update: xerces-c-3.2.5-1.fc39
2023-12-31 02:27:38
redos
redos
ROS-20240329-22
2024-03-29 00:00:00
amazon
amazon
Important: xerces-c
2023-10-30 23:59:00
cve
cve
CVE-2023-37536
2023-10-11 07:15:10
debiancve
debiancve
CVE-2023-37536
2023-10-11 07:15:10
redhatcve
redhatcve
CVE-2023-37536
2023-10-12 01:12:41
cvelist
cvelist
debian
debian
[SECURITY] [DLA 3704-1] xerces-c security update
2023-12-31 11:26:56
ubuntu
ubuntu
Xerces-C++ vulnerabilities
2024-01-18 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.0%
Related for UB:CVE-2023-37536