VYPR

rpm package

suse/xerces-c&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2

pkg:rpm/suse/xerces-c&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Vulnerabilities (1)

  • CVE-2018-1311Dec 18, 2019
    affected < 3.1.4-10.3.1fixed 3.1.4-10.3.1

    The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be