Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document.

According to the version of the xerces-c package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was discovered that the Xerces-C XML parser did not     properly process certain XML input. By providing     specially crafted XML data to an application using     Xerces-C for XML processing, a remote attacker could     exploit this flaw to cause an application crash or,     possibly, execute arbitrary code with the privileges of     the application.(CVE-2016-0729)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201612-46 (Xerces-C++: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Xerces-C++. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to process a specially crafted       file, possibly resulting in the remote execution of arbitrary code with       the privileges of the process, or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for xerces-c fixes the following issues :

  - CVE-2016-4463 Apache Xerces-C XML Parser Crashes on     Malformed DT (boo#985860) 

  - CVE-2016-2099 Exception handling mistake causing use     after free (boo#979208)

MinGW cross compiled xerces-c 3.1.4, fixing CVE-2016-0729, CVE-2016-2099 and CVE-2016-4463

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xerces-c fixes the following security issue :

  - CVE-2016-0729: Fixed mishandling certain kinds of     malformed input documents, that resulted in buffer     overlows during processing and error reporting. The     overflows can manifest as a segmentation fault or as     memory corruption during a parse operation. (bsc#966822)

This update was imported from the SUSE:SLE-12:Update update project.

Update to xerces-c 3.1.3, fixing CVE-2016-0729

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xerces-c fixes the following security issue :

  - CVE-2016-0729: Fixed mishandling certain kinds of     malformed input documents, that resulted in buffer     overlows during processing and error reporting. The     overflows can manifest as a segmentation fault or as     memory corruption during a parse operation. (bsc#966822)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xerces-c fixes the following security issues :

  - CVE-2016-0729: Fix for mishandling certain kinds of     malformed input documents, resulting in buffer overlows     during processing and error reporting. The overflows can     manifest as a segmentation fault or as memory corruption     during a parse operation. (boo#966822)

  - CVE-2015-0252: Fix for mishandling certain kinds of     malformed input documents, resulting in a segmentation     fault during a parse operation (boo#920810)

It was discovered that the Xerces-C XML parser did not properly process certain XML input. By providing specially crafted XML data to an application using Xerces-C for XML processing, a remote attacker could exploit this flaw to cause an application crash or, possibly, execute arbitrary code with the privileges of the application.
(CVE-2016-0729)

After installing the update, all applications using Xerces-C must be restarted for the update to take effect.

Updated xerces-c packages that fix one security issue are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Xerces-C is a validating XML parser written in a portable subset of C++.

It was discovered that the Xerces-C XML parser did not properly process certain XML input. By providing specially crafted XML data to an application using Xerces-C for XML processing, a remote attacker could exploit this flaw to cause an application crash or, possibly, execute arbitrary code with the privileges of the application.
(CVE-2016-0729)

Red Hat would like to thank Gustavo Grieco for reporting this issue.

All xerces-c users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, all applications using Xerces-C must be restarted for the update to take effect.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0430 advisory.

    [3.1.1-8]     Resolves: CVE-2016-0729

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Apache Software Foundation reports :

The Xerces-C XML parser mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. The bugs allow for a denial of service attack in many applications by an unauthenticated attacker, and could conceivably result in remote code execution.

Gustavo Grieco discovered that xerces-c, a validating XML parser library for C++, mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. These flaws could lead to a denial of service in applications using the xerces-c library, or potentially, to the execution of arbitrary code.

Gustavo Grieco discovered that xerces-c, a validating XML parser library for C++, mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. These flaws could lead to a denial of service in applications using the xerces-c library, or potentially, to the execution of arbitrary code.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
99767	EulerOS 2.0 SP1 : xerces-c (EulerOS-SA-2016-1004)	Nessus	Huawei Local Security Checks	critical
96126	GLSA-201612-46 : Xerces-C++: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
92354	openSUSE Security Update : xerces-c (openSUSE-2016-876)	Nessus	SuSE Local Security Checks	critical
92263	Fedora 23 : mingw-xerces-c (2016-87e8468465)	Nessus	Fedora Local Security Checks	critical
92257	Fedora 22 : mingw-xerces-c (2016-7615febbd6)	Nessus	Fedora Local Security Checks	critical
92226	Fedora 24 : mingw-xerces-c (2016-0a061f6dd9)	Nessus	Fedora Local Security Checks	critical
90665	openSUSE Security Update : xerces-c (openSUSE-2016-499)	Nessus	SuSE Local Security Checks	critical
90654	Fedora 22 : xerces-c-3.1.3-1.fc22 (2016-880b91c090)	Nessus	Fedora Local Security Checks	critical
90535	SUSE SLED12 / SLES12 Security Update : xerces-c (SUSE-SU-2016:1026-1)	Nessus	SuSE Local Security Checks	critical
90518	Fedora 23 : xerces-c-3.1.3-1.fc23 (2016-ae9ac16cf3)	Nessus	Fedora Local Security Checks	critical
90466	Fedora 24 : xerces-c-3.1.3-1.fc24 (2016-9ff972ca42)	Nessus	Fedora Local Security Checks	critical
90418	openSUSE Security Update : xerces-c (openSUSE-2016-429)	Nessus	SuSE Local Security Checks	critical
89864	Scientific Linux Security Update : xerces-c on SL7.x x86_64 (20160310)	Nessus	Scientific Linux Local Security Checks	critical
89862	RHEL 7 : xerces-c (RHSA-2016:0430)	Nessus	Red Hat Local Security Checks	critical
89859	Oracle Linux 7 : xerces-c (ELSA-2016-0430)	Nessus	Oracle Linux Local Security Checks	critical
89850	CentOS 7 : xerces-c (CESA-2016:0430)	Nessus	CentOS Local Security Checks	critical
89015	FreeBSD : xerces-c3 -- Parser Crashes on Malformed Input (a7f2e9c6-de20-11e5-8458-6cc21735f730)	Nessus	FreeBSD Local Security Checks	critical
88976	Debian DSA-3493-1 : xerces-c - security update	Nessus	Debian Local Security Checks	critical
88974	Debian DLA-433-1 : xerces-c security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2016-0729

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical