An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8795 advisory.

    Xerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give     your application the ability to read and write XML data. A shared library is provided for parsing,     generating, manipulating, and validating XML documents.

    Security Fix(es):

    * xerces-c: An integer overflow issue that allows remote attackers to cause out-of-bound access via HTTP     request (CVE-2023-37536)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle Essbase installed on the remote host is missing a security patch from the July 2024 Critical Patch Update (CPU). It is, therefore, affected by:

  - Vulnerability in Oracle Essbase (component: Essbase Web Platform (Apache Xerces-C++)). The supported version that     is affected is 21.5.6. Easily exploitable vulnerability allows high privileged attacker with logon to the     infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks of this     vulnerability can result in takeover of Oracle Essbase. (CVE-2023-37536)

  - Vulnerability in Oracle Essbase (component: Essbase Web Platform (Apache Commons Compress)). The supported version     that is affected is 21.5.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the     infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks require human     interaction from a person other than the attacker. Successful attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Essbase.
    (CVE-2024-26308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 12.2.1.4.0 versions of Access Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory.

  - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Webserver     Plugin (Apache Xerces-C++)). The supported version that is affected is 12.2.1.4.0. Easily exploitable     vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access     Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. (CVE-2023-37536)

  - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Third Party     (Apache Mina)). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability     allows unauthenticated attacker with network access via TLS to compromise Oracle Access Manager.
    Successful attacks of this vulnerability can result in unauthorized access to critical data or complete     access to all Oracle Access Manager accessible data. (CVE-2019-0231)

  - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Third Party     (JetBrains Kotlin)). The supported version that is affected is 12.2.1.4.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access     Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete     access to some of Oracle Access Manager accessible data. (CVE-2022-24329)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6590-1 advisory.

    It was discovered that Xerces-C++ was not properly handling memory management operations when parsing XML     data containing external DTDs, which could trigger a use-after-free error. If a user or automated system     were tricked into processing a specially crafted XML document, an attacker could possibly use this issue     to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS.
    (CVE-2018-1311)

    It was discovered that Xerces-C++ was not properly performing bounds checks when processing XML Schema     Definition files, which could lead to an out-of-bounds access via an HTTP request. If a user or automated     system were tricked into processing a specially crafted XSD file, a remote attacker could possibly use     this issue to cause a denial of service. (CVE-2023-37536)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-817ecc703f advisory.

  - The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the     scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and     has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using     a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. (CVE-2018-1311)

  - An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound     access via HTTP request. (CVE-2023-37536)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-52ba628e03 advisory.

  - The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the     scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and     has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using     a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. (CVE-2018-1311)

  - An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound     access via HTTP request. (CVE-2023-37536)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4715-1 advisory.

  - An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound     access via HTTP request. (CVE-2023-37536)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4586-1 advisory.

  - An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound     access via HTTP request. (CVE-2023-37536)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4543-1 advisory.

  - An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound     access via HTTP request. (CVE-2023-37536)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of xerces-c installed on the remote host is prior to 3.1.1-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2327 advisory.

  - An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound     access via HTTP request. (CVE-2023-37536)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1332ed94a7 advisory.

  - An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound     access via HTTP request. (CVE-2023-37536)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
210419	RHEL 7 : xerces-c (RHSA-2024:8795)	Nessus	Red Hat Local Security Checks	high
202719	Oracle Essbase Multiple Vulnerabilities (July 2024 CPU)	Nessus	Misc.	high
193591	Oracle Access Manager (Apr 2024 CPU)	Nessus	Misc.	high
189194	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : Xerces-C++ vulnerabilities (USN-6590-1)	Nessus	Ubuntu Local Security Checks	high
187403	Fedora 39 : xerces-c (2023-817ecc703f)	Nessus	Fedora Local Security Checks	high
187402	Fedora 38 : xerces-c (2023-52ba628e03)	Nessus	Fedora Local Security Checks	high
186747	SUSE SLES15 / openSUSE 15 Security Update : xerces-c (SUSE-SU-2023:4715-1)	Nessus	SuSE Local Security Checks	high
186336	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xerces-c (SUSE-SU-2023:4586-1)	Nessus	SuSE Local Security Checks	high
186253	SUSE SLES12 Security Update : xerces-c (SUSE-SU-2023:4543-1)	Nessus	SuSE Local Security Checks	high
184288	Amazon Linux 2 : xerces-c (ALAS-2023-2327)	Nessus	Amazon Linux Local Security Checks	high
183685	Fedora 37 : mingw-xerces-c (2023-1332ed94a7)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2023-37536

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high