Medium USN-3709-1 1 CVE

xapian-core vulnerability

Published Jul 10, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Xapian-core incorrectly handled certain files.
An attacker could possibly use this to execute arbitrary code.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	xapian-core	1.4.5-1ubuntu0.1

Vulnerabilities 1

Medium 6.1

CVE-2018-0499

xapian-core Cross-site Scripting vulnerability

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

xapian-core xapian-core xapian-core xapian-core Debian Ubuntu Alpine RubyGems

Jul 2, 2018

References

report
https://ubuntu.com/security/CVE-2018-0499