Vulnerability Details : CVE-2018-1311
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.
Vulnerability category: Memory Corruption
Products affected by CVE-2018-1311
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:xerces-c\+\+:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-1311
0.30%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 69 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-1311
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST | |
|
8.1
|
HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.2
|
5.9
|
NIST |
CWE ids for CVE-2018-1311
-
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-1311
-
https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35@%3Cc-users.xerces.apache.org%3E
Re: Security vulnerability - CVE-2018-1311 - Pony MailMailing List;Third Party Advisory
-
https://marc.info/?l=xerces-c-users&m=157653840106914&w=2
'Xerces-C Security Advisory [CVE-2018-1311]' - MARCMailing List;Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2024/02/16/1
oss-security - CVE-2024-23807: Apache Xerces C++: Use-after-free on external DTD scanMailing List;Third Party Advisory
-
https://www.oracle.com/security-alerts/cpujan2022.html
Oracle Critical Patch Update Advisory - January 2022Patch;Third Party Advisory
-
https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646@%3Cc-users.xerces.apache.org%3E
Security vulnerability - CVE-2018-1311 - Pony MailMailing List;Third Party Advisory
-
https://access.redhat.com/errata/RHSA-2020:0704
RHSA-2020:0704 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646%40%3Cc-users.xerces.apache.org%3E
Security vulnerability - CVE-2018-1311-Apache Mail ArchivesIssue Tracking
-
https://access.redhat.com/errata/RHSA-2020:0702
RHSA-2020:0702 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
https://www.debian.org/security/2020/dsa-4814
Debian -- Security Information -- DSA-4814-1 xerces-cThird Party Advisory
-
https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625@%3Cc-users.xerces.apache.org%3E
RE: Security vulnerability - CVE-2018-1311 - Pony MailMailing List;Third Party Advisory
-
https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b@%3Cc-dev.xerces.apache.org%3E
[xerces-c] 06/13: Add CVE-2018-1311 advisory and web site note. - Pony MailMitigation;Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A6WWL4SWKAVYK6VK5YN7KZP4MZWC7IY/
[SECURITY] Fedora 38 Update: xerces-c-3.2.5-1.fc38 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
-
https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625%40%3Cc-users.xerces.apache.org%3E
RE: Security vulnerability - CVE-2018-1311-Apache Mail ArchivesIssue Tracking
-
https://lists.debian.org/debian-lts-announce/2023/12/msg00027.html
[SECURITY] [DLA 3704-1] xerces-c security updateMailing List;Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AJYZUBGPVWJ7LEHRCMB5XVADQBNGURXD/
[SECURITY] Fedora 39 Update: xerces-c-3.2.5-1.fc39 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
-
https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35%40%3Cc-users.xerces.apache.org%3E
Re: Security vulnerability - CVE-2018-1311-Apache Mail ArchivesIssue Tracking
-
https://lists.debian.org/debian-lts-announce/2020/12/msg00025.html
[SECURITY] [DLA 2498-1] xerces-c security updateMailing List;Third Party Advisory
-
https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b%40%3Cc-dev.xerces.apache.org%3E
[xerces-c] 06/13: Add CVE-2018-1311 advisory and web site note.-Apache Mail ArchivesVendor Advisory
Jump to