CVE-2015-0252
NoneCVSS
—
EPSS
39.7%
Published
Mar 24, 2015
CISA due date
—
The record
internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | xerces-c | 0 | 3.1.1-5.1 |
| Debian:12 | xerces-c | 0 | 3.1.1-5.1 |
| Debian:13 | xerces-c | 0 | 3.1.1-5.1 |
| Debian:6.0 | xerces-c | 0 | 3.1.1-1+deb6u1 |
| Debian:7 | xerces-c | 0 | 3.1.1-3+deb7u1 |
| Mageia:4 | xerces-c | 0 | 3.1.2-1.mga4 |
| Red Hat:enterprise_linux:7::client | xerces-c | 0 | 0:3.1.1-7.el7_1 |
| Red Hat:enterprise_linux:7::client | xerces-c-debuginfo | 0 | 0:3.1.1-7.el7_1 |
| Red Hat:enterprise_linux:7::client | xerces-c-devel | 0 | 0:3.1.1-7.el7_1 |
| Red Hat:enterprise_linux:7::client | xerces-c-doc | 0 | 0:3.1.1-7.el7_1 |
| Red Hat:enterprise_linux:7::server | xerces-c | 0 | 0:3.1.1-7.ael7b_1 |
| Red Hat:enterprise_linux:7::server | xerces-c-debuginfo | 0 | 0:3.1.1-7.ael7b_1 |
| Red Hat:enterprise_linux:7::server | xerces-c-devel | 0 | 0:3.1.1-7.ael7b_1 |
| Red Hat:enterprise_linux:7::server | xerces-c-doc | 0 | 0:3.1.1-7.ael7b_1 |
| Red Hat:enterprise_linux:7::workstation | xerces-c | 0 | 0:3.1.1-7.el7_1 |
| Red Hat:enterprise_linux:7::workstation | xerces-c-debuginfo | 0 | 0:3.1.1-7.el7_1 |
| Red Hat:enterprise_linux:7::workstation | xerces-c-devel | 0 | 0:3.1.1-7.el7_1 |
| Red Hat:enterprise_linux:7::workstation | xerces-c-doc | 0 | 0:3.1.1-7.el7_1 |
| SUSE:Linux Enterprise Desktop 12 | xerces-c | 0 | 3.1.1-4.1 |
| SUSE:Linux Enterprise Workstation Extension 12 | xerces-c | 0 | 3.1.1-4.1 |
| Ubuntu:14.04:LTS | xerces-c | 0 | 3.1.1-5.1~build0.14.04.1 |
Related vulnerabilities
- CVE-2023-37536 An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to… Also affects xerces-c
- CVE-2018-1311 The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered… Also affects xerces-c
- CVE-2016-4463 Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent… Also affects xerces-c
- CVE-2016-2099 Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3… Also affects xerces-c
- CVE-2026-113786 pypdf is a free and open-source pure-python PDF library. CWE-20
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-20
- CVE-2026-111869 A vulnerability was identified in makeplane plane up to 1.4.2. CWE-20
- CVE-2026-100347 kin-openapi is a Go project for handling OpenAPI files. CWE-20