Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Xerces C++

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2024-23807

    Apache Xerces C++: Use-after-free on external DTD scan

    The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD pro…

    Apache Software Foundation Apache Xerces C++ xerces-c Ubuntu