Test Kennung:	1.3.6.1.4.1.25623.1.0.883195
Kategorie:	CentOS Local Security Checks
Titel:	CentOS: Security Advisory for xerces-c (CESA-2020:0704)
Zusammenfassung:	The remote host is missing an update for the 'xerces-c'; package(s) announced via the CESA-2020:0704 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'xerces-c' package(s) announced via the CESA-2020:0704 advisory. Vulnerability Insight: Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and write XML data. A shared library is provided for parsing, generating, manipulating, and validating XML documents. Security Fix(es): * xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs (CVE-2018-1311) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: 'xerces-c' package(s) on CentOS 7. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1311 https://marc.info/?l=xerces-c-users&m=157653840106914&w=2 Debian Security Information: DSA-4814 (Google Search) https://www.debian.org/security/2020/dsa-4814 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7A6WWL4SWKAVYK6VK5YN7KZP4MZWC7IY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AJYZUBGPVWJ7LEHRCMB5XVADQBNGURXD/ https://www.oracle.com/security-alerts/cpujan2022.html https://lists.debian.org/debian-lts-announce/2020/12/msg00025.html https://lists.debian.org/debian-lts-announce/2023/12/msg00027.html http://www.openwall.com/lists/oss-security/2024/02/16/1 https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b@%3Cc-dev.xerces.apache.org%3E https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625@%3Cc-users.xerces.apache.org%3E https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35@%3Cc-users.xerces.apache.org%3E https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646@%3Cc-users.xerces.apache.org%3E RedHat Security Advisories: RHSA-2020:0702 https://access.redhat.com/errata/RHSA-2020:0702 RedHat Security Advisories: RHSA-2020:0704 https://access.redhat.com/errata/RHSA-2020:0704
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.