http://www.openwall.com/lists/oss-security/2024/02/16/1

https://access.redhat.com/errata/RHSA-2020:0702

https://access.redhat.com/errata/RHSA-2020:0704

https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b%40%3Cc-dev.xerces.apache.org%3E

https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35%40%3Cc-users.xerces.apache.org%3E

https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646%40%3Cc-users.xerces.apache.org%3E

https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625%40%3Cc-users.xerces.apache.org%3E

https://lists.debian.org/debian-lts-announce/2020/12/msg00025.html

https://lists.debian.org/debian-lts-announce/2023/12/msg00027.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A6WWL4SWKAVYK6VK5YN7KZP4MZWC7IY/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AJYZUBGPVWJ7LEHRCMB5XVADQBNGURXD/

https://marc.info/?l=xerces-c-users&m=157653840106914&w=2

https://www.debian.org/security/2020/dsa-4814

https://www.oracle.com/security-alerts/cpujan2022.html

OR
     *cpe:2.3:a:apache:xerces-c\+\+:*:*:*:*:*:*:*:* versions from (including) 3.0.0 up to (including) 3.2.3

OR
     *cpe:2.3:a:apache:xerces-c\+\+:*:*:*:*:*:*:*:* versions from (including) 3.0.0 up to (excluding) 3.2.5

OR
     *cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

http://www.openwall.com/lists/oss-security/2024/02/16/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2024/02/16/1 Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b%40%3Cc-dev.xerces.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b%40%3Cc-dev.xerces.apache.org%3E Vendor Advisory

https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35%40%3Cc-users.xerces.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35%40%3Cc-users.xerces.apache.org%3E Issue Tracking

https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646%40%3Cc-users.xerces.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646%40%3Cc-users.xerces.apache.org%3E Issue Tracking

https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625%40%3Cc-users.xerces.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625%40%3Cc-users.xerces.apache.org%3E Issue Tracking

https://lists.debian.org/debian-lts-announce/2023/12/msg00027.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2023/12/msg00027.html Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A6WWL4SWKAVYK6VK5YN7KZP4MZWC7IY/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A6WWL4SWKAVYK6VK5YN7KZP4MZWC7IY/ Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AJYZUBGPVWJ7LEHRCMB5XVADQBNGURXD/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AJYZUBGPVWJ7LEHRCMB5XVADQBNGURXD/ Mailing List, Third Party Advisory

Apache Software Foundation http://www.openwall.com/lists/oss-security/2024/02/16/1 [No types assigned]

Apache Software Foundation https://lists.debian.org/debian-lts-announce/2023/12/msg00027.html [No types assigned]

Apache Software Foundation https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AJYZUBGPVWJ7LEHRCMB5XVADQBNGURXD/ [No types assigned]

Apache Software Foundation https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A6WWL4SWKAVYK6VK5YN7KZP4MZWC7IY/ [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b%40%3Cc-dev.xerces.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35%40%3Cc-users.xerces.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646%40%3Cc-users.xerces.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625%40%3Cc-users.xerces.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b@%3Cc-dev.xerces.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35@%3Cc-users.xerces.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646@%3Cc-users.xerces.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625@%3Cc-users.xerces.apache.org%3E

OR
     *cpe:2.3:a:apache:xerces-c:*:*:*:*:*:*:*:* versions from (including) 3.0.0 from (including) 3.2.3

OR
     *cpe:2.3:a:apache:xerces-c++:*:*:*:*:*:*:*:* versions from (including) 3.0.0 from (including) 3.2.3

OR
     *cpe:2.3:a:apache:xerces-c:*:*:*:*:*:*:*:* versions from (including) 3.0.0 up to (including) 3.2.2

OR
     *cpe:2.3:a:apache:xerces-c:*:*:*:*:*:*:*:* versions from (including) 3.0.0 up to (including) 3.2.3

OR
     *cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:* versions up to (excluding) 21.4.0.0.0

OR
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_l

https://access.redhat.com/errata/RHSA-2020:0702 No Types Assigned

https://access.redhat.com/errata/RHSA-2020:0702 Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0704 No Types Assigned

https://access.redhat.com/errata/RHSA-2020:0704 Third Party Advisory

https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35@%3Cc-users.xerces.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35@%3Cc-users.xerces.apache.org%3E Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646@%3Cc-users.xerces.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646@%3Cc-users.xerces.apache.org%3E Mailing List, Third Party Advisory

https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625@%3Cc-users.xerces.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625@%3Cc-users.xerces.apache.org%3E Mailing List, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2020/12/msg00025.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2020/12/msg00025.html Mailing List, Third Party Advisory

https://www.debian.org/security/2020/dsa-4814 No Types Assigned

https://www.debian.org/security/2020/dsa-4814 Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html [No Types Assigned]

https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35@%3Cc-users.xerces.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625@%3Cc-users.xerces.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646@%3Cc-users.xerces.apache.org%3E [No Types Assigned]

https://www.debian.org/security/2020/dsa-4814 [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2020/12/msg00025.html [No Types Assigned]

The Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

https://access.redhat.com/errata/RHSA-2020:0702 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2020:0704 [No Types Assigned]

NIST AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NIST (AV:N/AC:M/Au:N/C:P/I:P/A:P)

NIST (AV:N/AC:L/Au:N/C:N/I:N/A:P)

https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b@%3Cc-dev.xerces.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b@%3Cc-dev.xerces.apache.org%3E Mitigation, Third Party Advisory

https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b@%3Cc-dev.xerces.apache.org%3E [No Types Assigned]

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NIST (AV:N/AC:L/Au:N/C:N/I:N/A:P)

NIST CWE-416

OR
     *cpe:2.3:a:apache:xerces-c:*:*:*:*:*:*:*:* versions from (including) 3.0.0 up to (including) 3.2.2

https://marc.info/?l=xerces-c-users&m=157653840106914&w=2 No Types Assigned

https://marc.info/?l=xerces-c-users&m=157653840106914&w=2 Mailing List, Third Party Advisory