CVE-2016-2099

概要

参考情報

• lists.opensuse.org/opensuse-updates/2016-07/msg00016.html
• lists.opensuse.org/opensuse-updates/2016-07/msg00053.html
• lists.opensuse.org/opensuse-updates/2016-09/msg00013.html
• debian.org/security/2016/dsa-3579
• openwall.com/lists/oss-security/2016/05/09/7
• oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• securityfocus.com/bid/90502
• issues.apache.org/jira/browse/XERCESC-2066
• security.gentoo.org/glsa/201612-46

xerces-c++ のその他の脆弱性

• CVE-2024-23807緊急 9.8The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DT…
• CVE-2023-37536高 8.8An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.
• CVE-2018-1311高 8.1The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has …
• CVE-2017-12627緊急 9.8In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain …
• CVE-2016-4463高 7.5Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply n…