CVE-2016-2099

CRITICAL

Apache Xerces C++ < 3.1.3 - Use-After-Free in DTDScanner

Title source: llm
STIX 2.1

Description

Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document.

References (9)

Core 9
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2016/dsa-3579
Various Sources x_refsource_confirm
https://issues.apache.org/jira/browse/XERCESC-2066
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/90502
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201612-46
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-07/msg00016.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-09/msg00013.html
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/05/09/7
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html

Scores

CVSS v3 9.8
EPSS 0.0217
EPSS Percentile 84.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (2)
apache/xerces-c\+\+ < 3.1.3
opensuse/opensuse 13.2
Published May 13, 2016
Tracked Since Feb 18, 2026