Vulnerability Details : CVE-2018-1311
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.
Vulnerability category: Memory Corruption
Exploit prediction scoring system (EPSS) score for CVE-2018-1311
Probability of exploitation activity in the next 30 days: 0.29%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 68 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2018-1311
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
|
8.1
|
HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.2
|
5.9
|
NIST |
CWE ids for CVE-2018-1311
-
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-1311
-
https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35@%3Cc-users.xerces.apache.org%3E
Re: Security vulnerability - CVE-2018-1311 - Pony MailMailing List;Third Party Advisory
-
https://marc.info/?l=xerces-c-users&m=157653840106914&w=2
'Xerces-C Security Advisory [CVE-2018-1311]' - MARCMailing List;Third Party Advisory
-
http://www.openwall.com/lists/oss-security/2024/02/16/1
oss-security - CVE-2024-23807: Apache Xerces C++: Use-after-free on external DTD scan
-
https://www.oracle.com/security-alerts/cpujan2022.html
Oracle Critical Patch Update Advisory - January 2022Patch;Third Party Advisory
-
https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646@%3Cc-users.xerces.apache.org%3E
Security vulnerability - CVE-2018-1311 - Pony MailMailing List;Third Party Advisory
-
https://access.redhat.com/errata/RHSA-2020:0704
RHSA-2020:0704 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
https://lists.apache.org/thread.html/rabbcc0249de1dda70cda96fd9bcff78217be7a57d96e7dcc8cd96646%40%3Cc-users.xerces.apache.org%3E
Security vulnerability - CVE-2018-1311-Apache Mail Archives
-
https://access.redhat.com/errata/RHSA-2020:0702
RHSA-2020:0702 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
https://www.debian.org/security/2020/dsa-4814
Debian -- Security Information -- DSA-4814-1 xerces-cThird Party Advisory
-
https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625@%3Cc-users.xerces.apache.org%3E
RE: Security vulnerability - CVE-2018-1311 - Pony MailMailing List;Third Party Advisory
-
https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b@%3Cc-dev.xerces.apache.org%3E
[xerces-c] 06/13: Add CVE-2018-1311 advisory and web site note. - Pony MailMitigation;Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A6WWL4SWKAVYK6VK5YN7KZP4MZWC7IY/
[SECURITY] Fedora 38 Update: xerces-c-3.2.5-1.fc38 - package-announce - Fedora Mailing-Lists
-
https://lists.apache.org/thread.html/rfeb8abe36bcca91eb603deef49fbbe46870918830a66328a780b8625%40%3Cc-users.xerces.apache.org%3E
RE: Security vulnerability - CVE-2018-1311-Apache Mail Archives
-
https://lists.debian.org/debian-lts-announce/2023/12/msg00027.html
[SECURITY] [DLA 3704-1] xerces-c security update
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AJYZUBGPVWJ7LEHRCMB5XVADQBNGURXD/
[SECURITY] Fedora 39 Update: xerces-c-3.2.5-1.fc39 - package-announce - Fedora Mailing-Lists
-
https://lists.apache.org/thread.html/r90ec105571622a7dc3a43b846c12732d2e563561dfb2f72941625f35%40%3Cc-users.xerces.apache.org%3E
Re: Security vulnerability - CVE-2018-1311-Apache Mail Archives
-
https://lists.debian.org/debian-lts-announce/2020/12/msg00025.html
[SECURITY] [DLA 2498-1] xerces-c security updateMailing List;Third Party Advisory
-
https://lists.apache.org/thread.html/r48ea463fde218b1e4cc1a1d05770a0cea34de0600b4355315a49226b%40%3Cc-dev.xerces.apache.org%3E
[xerces-c] 06/13: Add CVE-2018-1311 advisory and web site note.-Apache Mail Archives
Products affected by CVE-2018-1311
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:xerces-c\+\+:*:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*