CVE-2015-0252

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-March/152882.html
• lists.fedoraproject.org/pipermail/package-announce/2015-March/153094.html
• lists.fedoraproject.org/pipermail/package-announce/2015-March/153829.html
• lists.fedoraproject.org/pipermail/package-announce/2015-March/153887.html
• lists.fedoraproject.org/pipermail/package-announce/2015-March/153903.html
• lists.fedoraproject.org/pipermail/package-announce/2015-March/153923.html
• lists.opensuse.org/opensuse-updates/2016-04/msg00012.html
• packetstormsecurity.com/files/131756/Apache-Xerces-C-XML-Parser-Denial-Of-Service.html
• rhn.redhat.com/errata/RHSA-2015-1193.html
• debian.org/security/2015/dsa-3199
• oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• securityfocus.com/bid/73252
• securitytracker.com/id/1032254
• xerces.apache.org/xerces-c/secadv/CVE-2015-0252.txt · Vendor Advisory
• shibboleth.net/community/advisories/secadv_20150319.txt
• exploit-db.com/exploits/36906

xerces-c++ のその他の脆弱性

• CVE-2024-23807緊急 9.8The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DT…
• CVE-2023-37536高 8.8An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
• CVE-2018-1311高 8.1The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has …
• CVE-2017-12627緊急 9.8In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain …
• CVE-2016-4463高 7.5Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply n…