CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.

Affected products

Alt Linux, Apache Xerces-C, Centos, Red Hat, Suse, Ubuntu

Apache Xerces-c\+\+

≤ 3.1.3

CVSS 3.0

7.5 HIGH

EPSS

14.1% (96th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2016-07-08