Xerces C Apache Xerces C

Do you want an email whenever new security vulnerabilities are reported in Apache Xerces C?

By the Year

In 2022 there have been 0 vulnerabilities in Apache Xerces C . Xerces C did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2022 0 0.00
2021 0 0.00
2020 0 0.00
2019 1 8.10
2018 1 9.80

It may take a day or so for new Xerces C vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Apache Xerces C Security Vulnerabilities

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs

CVE-2018-1311 8.1 - High - December 18, 2019

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

Dangling pointer

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths

CVE-2017-12627 9.8 - Critical - March 01, 2018

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer dereference under certain conditions.

NULL Pointer Dereference

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Apache Xerces C or by Apache? Click the Watch button to subscribe.

Apache
Vendor

subscribe