Unrated severityNVD Advisory· Published Mar 24, 2015· Updated Jun 17, 2026
CVE-2015-0252
CVE-2015-0252
Description
internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:apache:xerces-c\+\+:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:xerces-c\+\+:*:*:*:*:*:*:*:*range: <=3.1.1
- (no CPE)range: <3.1.2
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
- osv-coords2 versionspkg:rpm/suse/xerces-c&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/xerces-c&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012
< 3.1.1-4.1+ 1 more
- (no CPE)range: < 3.1.1-4.1
- (no CPE)range: < 3.1.1-4.1
Patches
Vulnerability mechanics
References
16- xerces.apache.org/xerces-c/secadv/CVE-2015-0252.txtnvdVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-March/152882.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153094.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153829.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153887.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153903.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153923.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-04/msg00012.htmlnvd
- packetstormsecurity.com/files/131756/Apache-Xerces-C-XML-Parser-Denial-Of-Service.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-1193.htmlnvd
- www.debian.org/security/2015/dsa-3199nvd
- www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlnvd
- www.securityfocus.com/bid/73252nvd
- www.securitytracker.com/id/1032254nvd
- shibboleth.net/community/advisories/secadv_20150319.txtnvd
- www.exploit-db.com/exploits/36906/nvd
News mentions
0No linked articles in our index yet.