USN-6579-1: Xerces-C++ vulnerability
It was discovered that Xerces-C++ was not properly handling memory management operations when parsing XML data containing external DTDs, which could trigger a use-after-free error. If a user or automated system were tricked into processing a specially crafted XML document, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6579-1?
The severity of USN-6579-1 is classified as high due to the potential for a use-after-free vulnerability.
How do I fix USN-6579-1?
To fix USN-6579-1, update the affected packages to the specified remedied versions provided by Ubuntu.
Which versions of Ubuntu are affected by USN-6579-1?
USN-6579-1 affects Ubuntu versions 14.04, 16.04, and 18.04.
What is the impact of USN-6579-1?
The impact of USN-6579-1 includes potential execution of arbitrary code if a malicious XML document is processed.
What packages are affected by USN-6579-1?
The affected packages include libxerces-c3.1, libxerces-c3.2, and libxerces-c-samples.