CVE-2016-0729
Fixed in a distro release EPSS 9%
Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.
Products: samsung x14j_firmware, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xerces-c | 3.1.3+debian-1 |
| Debian 13 | xerces-c | 3.1.3+debian-1 |
| Debian 14 | xerces-c | 3.1.3+debian-1 |
| Debian 6.0 | xerces-c | 3.1.1-1+deb6u2 |
| Debian 7 | xerces-c | 3.1.1-3+deb7u2 |
| Debian 8 | xerces-c | 3.1.1-5.1+deb8u1 |
| Red Hat Enterprise Linux 7 | xerces-c | 0:3.1.1-8.el7_2 |
| Red Hat Enterprise Linux 7 | xerces-c-debuginfo | 0:3.1.1-8.el7_2 |
| Red Hat Enterprise Linux 7 | xerces-c-devel | 0:3.1.1-8.el7_2 |
| Red Hat Enterprise Linux 7 | xerces-c-doc | 0:3.1.1-8.el7_2 |
| SUSE Linux Enterprise Desktop 12 | xerces-c | 3.1.1-7.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | xerces-c | 3.1.1-7.1 |
| SUSE Linux Enterprise Server 12 SP1 | xerces-c | 3.1.1-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | xerces-c | 3.1.1-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | xerces-c | 3.1.1-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 | xerces-c | 3.1.1-7.1 |
| Ubuntu 14.04 LTS | xerces-c | 3.1.1-5.1+deb8u1build0.14.04.1 |
| openSUSE Tumbleweed | xerces-c | 3.1.4-1.3 |