PT-2018-19282 · Apache · Apache Xml Security For C++

Publicado 2018-09-21 · Atualizado 2018-09-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Apache XML Security for C++ library (affected versions not specified)

Description The issue is related to insufficient validation of KeyInfo hints in the Apache XML Security for C++ library. This could result in denial of service via NULL pointer dereferences when processing malformed XML data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2018-0381

Produtos afetados

Apache Xml Security For C++

Referências · 4

• https://bugs.mageia.org/show_bug.cgi?id=23401 · Nota
• https://issues.apache.org/jira/projects/SANTUARIO/issues/SANTUARIO-491 · Nota
• https://osv.dev/vulnerability/MGASA-2018-0381 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2018-0381.html · Nota de Segurança