Skip to content
OpenAdvisories
Unscored DSA-1984-1 1 CVE

libxerces2-java - denial of service

Published Jan 30, 2010 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 libxerces2-java 2.8.1-1+etch1
Debian · 5.0 libxerces2-java 2.9.1-2+lenny1

Vulnerabilities 1

  • Medium —
    CVE-2009-2625 EPSS 30%

    Denial of service in Apache Xerces2

    XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and applic…