Unrated severityNVD Advisory· Published Mar 24, 2015· Updated May 6, 2026
CVE-2015-0252
CVE-2015-0252
Description
internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.
Affected products
5- cpe:2.3:o:debian:debian_linux:7.1:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
16- xerces.apache.org/xerces-c/secadv/CVE-2015-0252.txtnvdVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2015-March/152882.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153094.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153829.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153887.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153903.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2015-March/153923.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-04/msg00012.htmlnvd
- packetstormsecurity.com/files/131756/Apache-Xerces-C-XML-Parser-Denial-Of-Service.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-1193.htmlnvd
- www.debian.org/security/2015/dsa-3199nvd
- www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlnvd
- www.securityfocus.com/bid/73252nvd
- www.securitytracker.com/id/1032254nvd
- shibboleth.net/community/advisories/secadv_20150319.txtnvd
- www.exploit-db.com/exploits/36906/nvd
News mentions
0No linked articles in our index yet.