CVE-2023-37536

CVE	CVE-2023-37536
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-10-11 07:15:00 UTC
Updated	2023-12-31 14:15:00 UTC
Description	An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP request.

Problem Types: CWE-190

Type	Vendor	Product	Version	Update	Edition	Language
Application	Apache	Xerces-c	3.2.3	All	All	All
Operating System	Fedoraproject	Fedora	37	All	All	All
Application	Hcltech	Bigfix Platform	All	All	All	All

Reference	Source	Link	Tags
lists.debian.org/debian-lts-announce/2023/12/msg00027.html		lists.debian.org
Security Bulletin: HCL BigFix Platform is affected by multiple security vulnerabilities - Customer Support	MISC	support.hcltechsw.com
[SECURITY] Fedora 37 Update: mingw-xerces-c-3.2.4-1.fc37 - package-announce - Fedora Mailing-Lists	MISC	lists.fedoraproject.org
lists.fedoraproject.org/archives/list/[email protected]/messag...		lists.fedoraproject.org
lists.fedoraproject.org/archives/list/[email protected]/messag...		lists.fedoraproject.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

200056 Ubuntu Security Notification for Xerces-C++ Vulnerabilities (USN-6590-1)
284654 Fedora Security Update for mingw (FEDORA-2023-1332ed94a7)
284841 Fedora Security Update for xerces (FEDORA-2023-52ba628e03)
285073 Fedora Security Update for xerces (FEDORA-2023-817ecc703f)
356610 Amazon Linux Security Advisory for xerces-c : ALAS2-2023-2327
6000416 Debian Security Update for xerces-c (DLA 3704-1)
755330 SUSE Enterprise Linux Security Update for xerces-c (SUSE-SU-2023:4543-1)
755355 SUSE Enterprise Linux Security Update for xerces-c (SUSE-SU-2023:4586-1)
755384 SUSE Enterprise Linux Security Update for xerces-c (SUSE-SU-2023:4715-1)
755385 SUSE Enterprise Linux Security Update for xerces-c (SUSE-SU-2023:4715-1)