Debian/xerces-c: high 8.1
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library
Action: Upgrade xerces-c to 3.2.3+debian-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.3+debian-2 | - |
Fixed versions
| 3.2.3+debian-2 |
Sources
- osv: DEBIAN-CVE-2018-1311#Debian:13/xerces-c
- https://security-tracker.debian.org/tracker/CVE-2018-1311
published · modified · JSON