High ELSA-2024-8795 1 CVE

Important: xerces-c security update (Oracle Linux 7)

Published Nov 21, 2024 · Updated Nov 21, 2024

Ecosystem: Oracle Linux

Summary

[3.1.1-10.0.1]
- back port fix for CVE-2023-37536 [Orabug: 37241079]

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	xerces-c	0:3.1.1-10.0.1.el7_9
Oracle Linux · 7	xerces-c-devel	0:3.1.1-10.0.1.el7_9
Oracle Linux · 7	xerces-c-doc	0:3.1.1-10.0.1.el7_9

Vulnerabilities 1

High 8.2

CVE-2023-37536

HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3

An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.

HCL Software BigFix Platform xerces-c xerces-c Debian Ubuntu

Oct 11, 2023