CVE-2018-1311: Use After Free
Apache Xerces-C could allow a remote attacker to execute arbitrary code on the system, caused by an use-after-free error during the scanning of external DTDs. By sending a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
Other sources
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCESDISABLEDTD environment variable.
— Ubuntu
XML parser contains a use-after-free error triggered during the scanning of external DTDs. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCESDISABLEDTD environment variable.
External References:
https://marc.info/?l=xerces-c-users&m=157653840106914&w=2
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2018-1311?
CVE-2018-1311 is a vulnerability in the Apache Xerces-C XML parser that could allow a remote attacker to execute arbitrary code on the system.
How severe is CVE-2018-1311?
CVE-2018-1311 has a severity rating of 9.8 out of 10, which is classified as critical.
What is the root cause of CVE-2018-1311?
The root cause of CVE-2018-1311 is a use-after-free error triggered during the scanning of external Document Type Definitions (DTDs) in the Apache Xerces-C XML parser.
Is there a fix available for CVE-2018-1311?
At the time of writing, there is no fix available for CVE-2018-1311 in the maintained version of the Apache Xerces-C library. However, disabling DTD processing can mitigate the vulnerability.
How can I mitigate CVE-2018-1311?
To mitigate CVE-2018-1311, you can disable DTD processing in the Apache Xerces-C XML parser.