CVE-2023-37536
Fixed in a distro release EPSS 2%CVSS 8.2
An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
Products: HCL Software BigFix Platform, hcltech bigfix_platform, fedoraproject fedora, apache xerces-c\+\+
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | xerces-c | 3.2.2+debian-1+deb10u2 |
| Debian 12 | xerces-c | 3.2.4+debian-1 |
| Debian 13 | xerces-c | 3.2.4+debian-1 |
| Debian 14 | xerces-c | 3.2.4+debian-1 |
| Red Hat rhel els 7 | xerces-c | 0:3.1.1-10.el7_9.1 |
| Red Hat rhel els 7 | xerces-c-debuginfo | 0:3.1.1-10.el7_9.1 |
| Red Hat rhel els 7 | xerces-c-devel | 0:3.1.1-10.el7_9.1 |
| Red Hat rhel els 7 | xerces-c-doc | 0:3.1.1-10.el7_9.1 |
| SUSE Enterprise Storage 7.1 | xerces-c | 3.2.3-150300.3.3.2 |
| SUSE Enterprise Storage 7.1 | xerces-c | 3.1.4-150200.10.8.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | xerces-c | 3.1.4-150200.10.8.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | xerces-c | 3.2.3-150300.3.3.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | xerces-c | 3.1.4-150200.10.8.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | xerces-c | 3.2.3-150300.3.3.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | xerces-c | 3.1.4-150200.10.8.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | xerces-c | 3.2.3-150300.3.3.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | xerces-c | 3.2.3-150300.3.3.2 |
| SUSE Linux Enterprise Server 12 SP5 | xerces-c | 3.1.1-13.9.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | xerces-c | 3.1.4-150200.10.8.2 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | xerces-c | 3.1.4-150200.10.8.2 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | xerces-c | 3.2.3-150300.3.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | xerces-c | 3.1.1-13.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | xerces-c | 3.1.4-150200.10.8.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | xerces-c | 3.2.3-150300.3.3.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | xerces-c | 3.1.4-150200.10.8.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | xerces-c | 3.1.1-13.9.1 |
| Ubuntu 20.04 LTS | xerces-c | 3.2.2+debian-1ubuntu0.2 |
| Ubuntu 22.04 LTS | xerces-c | 3.2.3+debian-3ubuntu0.1 |
| Ubuntu Pro 14.04 LTS | xerces-c | 3.1.1-5.1+deb8u4ubuntu0.1~esm2 |
| Ubuntu Pro 16.04 LTS | xerces-c | 3.1.3+debian-1ubuntu0.1~esm3 |
| Ubuntu Pro 18.04 LTS | xerces-c | 3.2.0+debian-2ubuntu0.1~esm3 |
| openSUSE Leap 15.4 | xerces-c | 3.1.4-150200.10.8.2 |
| openSUSE Leap 15.4 | xerces-c | 3.2.3-150300.3.3.2 |
| openSUSE Leap 15.5 | xerces-c | 3.2.3-150300.3.3.2 |