oval:org.mitre.oval:def:26596
Definition Id: oval:org.mitre.oval:def:26596 | |||
Oval ID: | oval:org.mitre.oval:def:26596 | ||
Title: | ELSA-2014-1319 -- xerces-j2 security update (Moderate) | ||
Description: | Apache Xerces for Java (Xerces-J) is a high performance, standards compliant, validating XML parser written in Java. The xerces-j2 packages provide Xerces-J version 2. A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU. (CVE-2013-4002) All xerces-j2 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. Applications using the Xerces-J must be restarted for this update to take effect. | ||
Family: | unix | Class: | patch |
Reference(s): | ELSA-2014-1319 CVE-2013-4002 | Version: | 3 |
Platform(s): | Oracle Linux 7 | Product(s): | xerces-j2 |
Definition Synopsis: | |||
Definition Id: oval:org.mitre.oval:def:25183 | |||
Oval ID: | oval:org.mitre.oval:def:25183 | ||
Title: | Oracle Linux 7.x | ||
Description: | The operating system installed on the system is Oracle Linux 7.x | ||
Family: | unix | Class: | inventory |
Reference(s): | cpe:/o:oracle:linux:7 | Version: | 3 |
Platform(s): | Oracle Linux 7 | Product(s): | |
Definition Synopsis: | |||
Referenced By: | |||
oval:org.mitre.oval:def:26596 |