CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1311

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.042

EPSS Ranking 88.0%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 6.8

References

Products affected by CVE-2018-1311

Apache » Xerces-C++ » Version: 3.0.0

cpe:2.3:a:apache:xerces-c++:3.0.0
Apache » Xerces-C++ » Version: 3.0.1

cpe:2.3:a:apache:xerces-c++:3.0.1
Apache » Xerces-C++ » Version: 3.1.0

cpe:2.3:a:apache:xerces-c++:3.1.0
Apache » Xerces-C++ » Version: 3.1.1

cpe:2.3:a:apache:xerces-c++:3.1.1
Apache » Xerces-C++ » Version: 3.1.2

cpe:2.3:a:apache:xerces-c++:3.1.2
Apache » Xerces-C++ » Version: 3.1.3

cpe:2.3:a:apache:xerces-c++:3.1.3
Apache » Xerces-C++ » Version: 3.1.4

cpe:2.3:a:apache:xerces-c++:3.1.4
Apache » Xerces-C++ » Version: 3.2.0

cpe:2.3:a:apache:xerces-c++:3.2.0
Apache » Xerces-C++ » Version: 3.2.1

cpe:2.3:a:apache:xerces-c++:3.2.1
Apache » Xerces-C++ » Version: 3.2.2

cpe:2.3:a:apache:xerces-c++:3.2.2
Apache » Xerces-C++ » Version: 3.2.3

cpe:2.3:a:apache:xerces-c++:3.2.3
Oracle » Goldengate » Version: N/A

cpe:2.3:a:oracle:goldengate:-
Oracle » Goldengate » Version: 11.2

cpe:2.3:a:oracle:goldengate:11.2
Oracle » Goldengate » Version: 12.1.2

cpe:2.3:a:oracle:goldengate:12.1.2
Oracle » Goldengate » Version: 12.1.2.1.0

cpe:2.3:a:oracle:goldengate:12.1.2.1.0
Oracle » Goldengate » Version: 12.2.0.1

cpe:2.3:a:oracle:goldengate:12.2.0.1
Oracle » Goldengate » Version: 12.2.0.2.0

cpe:2.3:a:oracle:goldengate:12.2.0.2.0
Oracle » Goldengate » Version: 12.3.0

cpe:2.3:a:oracle:goldengate:12.3.0
Oracle » Goldengate » Version: 12.3.0.1.0

cpe:2.3:a:oracle:goldengate:12.3.0.1.0
Oracle » Goldengate » Version: 12.3.0.1.2

cpe:2.3:a:oracle:goldengate:12.3.0.1.2
Oracle » Goldengate » Version: 12.3.0.1.6

cpe:2.3:a:oracle:goldengate:12.3.0.1.6
Oracle » Goldengate » Version: 12.3.2.1

cpe:2.3:a:oracle:goldengate:12.3.2.1
Oracle » Goldengate » Version: 12.3.2.1.1

cpe:2.3:a:oracle:goldengate:12.3.2.1.1
Oracle » Goldengate » Version: 18.1.0.0.0

cpe:2.3:a:oracle:goldengate:18.1.0.0.0
Oracle » Goldengate » Version: 18.1.0.0.1

cpe:2.3:a:oracle:goldengate:18.1.0.0.1
Oracle » Goldengate » Version: 19.1.0.0.0

cpe:2.3:a:oracle:goldengate:19.1.0.0.0
Oracle » Goldengate » Version: 19.1.0.0.0.210420

cpe:2.3:a:oracle:goldengate:19.1.0.0.0.210420
Oracle » Goldengate » Version: 19.1.0.0.1

cpe:2.3:a:oracle:goldengate:19.1.0.0.1
Oracle » Goldengate » Version: 19.1.0.0.2

cpe:2.3:a:oracle:goldengate:19.1.0.0.2
Oracle » Goldengate » Version: 19.1.0.0.220719

cpe:2.3:a:oracle:goldengate:19.1.0.0.220719
Oracle » Goldengate » Version: 19.1.0.0.3

cpe:2.3:a:oracle:goldengate:19.1.0.0.3
Oracle » Goldengate » Version: 19.1.0.0.4

cpe:2.3:a:oracle:goldengate:19.1.0.0.4
Oracle » Goldengate » Version: 21.1.0

cpe:2.3:a:oracle:goldengate:21.1.0
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 38

cpe:2.3:o:fedoraproject:fedora:38
Fedoraproject » Fedora » Version: 39

cpe:2.3:o:fedoraproject:fedora:39
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1311

Products

Pricing

Contact Us