JDK: XML parsing Denial-Of-Service (6845701)
Published Aug 6, 2009
5.0
MEDIUMCVSS 2.0
EPSS 30.38%
Description
XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
Affected products
No data.
Configuration 1
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.5.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
- 1.6.0
Configuration 2
- 10
- 11
Configuration 3
- 11.0
- 11.1
- 11.2
- 9
- 10
- 10
- 11
Configuration 4
- 4.0
- 5.0
Configuration 5
- 6.06
- 8.04
- 8.10
- 9.04
- 9.10
Configuration 6
- 6.1
- 6.2.1
- 7.0
- 6.2.1
- 7.0
- 7.0
Configuration 7
- 2.9.1
No data.
Extras for RHEL 3
java-1.4.2-ibm-0:1.4.2.13.1-1jpp.1.el3
Fixed · RHSA-2009:1505
Extras for RHEL 4
java-1.4.2-ibm-0:1.4.2.13.1-1jpp.1.el4
Fixed · RHSA-2009:1505
Extras for RHEL 4
java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el4
Fixed · RHSA-2009:1236
Extras for RHEL 4
java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4
Fixed · RHSA-2009:1199
Extras for RHEL 4
java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4
Fixed · RHSA-2009:1582
Extras for RHEL 4
java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4
Fixed · RHSA-2009:1200
JBEAP 4.2.0 for RHEL 4
glassfish-javamail-0:1.4.2-0jpp.ep1.5.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
glassfish-jsf-0:1.2_13-2.1.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
hibernate3-1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
hibernate3-annotations-0:3.3.1-1.11.GA_CP02.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
hibernate3-entitymanager-0:3.3.2-2.5.GA_CP01.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jacorb-0:2.3.0-1jpp.ep1.9.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jakarta-commons-logging-jboss-0:1.1-9.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jboss-aop-0:1.5.5-3.CP04.2.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jboss-common-0:1.2.1-0jpp.ep1.3.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jboss-remoting-0:2.2.3-3.SP1.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jboss-seam-0:1.2.1-1.ep1.22.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jbossas-0:4.2.0-5.GA_CP08.5.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jbossts-1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jbossweb-0:2.0.0-6.CP12.0jpp.ep1.2.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jcommon-0:1.0.16-1.1.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jfreechart-0:1.0.13-2.3.1.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
jgroups-1:2.4.7-1.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
quartz-0:1.5.2-1jpp.patch01.ep1.4.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
rh-eap-docs-0:4.2.0-6.GA_CP08.ep1.3.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
xerces-j2-0:2.7.1-9jpp.4.patch_02.1.ep1.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 4
xml-security-0:1.3.0-1.3.patch01.ep1.2.el4
Fixed · RHSA-2009:1637
JBEAP 4.2.0 for RHEL 5
glassfish-jsf-0:1.2_13-2.1.ep1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
hibernate3-1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
hibernate3-annotations-0:3.3.1-1.11GA_CP02.ep1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
hibernate3-entitymanager-0:3.3.2-2.5.1.ep1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jacorb-0:2.3.0-1jpp.ep1.9.1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jboss-aop-0:1.5.5-3.CP04.2.ep1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jboss-common-0:1.2.1-0jpp.ep1.3.el5.1
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jboss-remoting-0:2.2.3-3.SP1.ep1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jboss-seam-0:1.2.1-1.ep1.14.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jbossas-0:4.2.0-5.GA_CP08.5.2.ep1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jbossts-1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jbossweb-0:2.0.0-6.CP12.0jpp.ep1.2.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jcommon-0:1.0.16-1.1.ep1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jfreechart-0:1.0.13-2.3.1.ep1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
jgroups-1:2.4.7-1.ep1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
quartz-0:1.5.2-1jpp.patch01.ep1.4.1.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
rh-eap-docs-0:4.2.0-6.GA_CP08.ep1.3.el5
Fixed · RHSA-2009:1650
JBEAP 4.2.0 for RHEL 5
xml-security-0:1.3.0-1.3.patch01.ep1.2.1.el5
Fixed · RHSA-2009:1650
RHEL 4 for SAP
java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el4_8
Fixed · RHSA-2009:1551
RHEL 5 for SAP
java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el5_3
Fixed · RHSA-2009:1551
RHEV Manager version 3.0
jasperreports-server-pro-0:4.7.1-2.el6ev
Fixed · RHSA-2012:1537
Red Hat Enterprise Linux 5
java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5
Fixed · RHSA-2009:1201
Red Hat Enterprise Linux 5
xerces-j2-0:2.7.1-7jpp.2.el5_4.2
Fixed · RHSA-2009:1615
Red Hat Enterprise Linux 6
xerces-j2-0:2.7.1-12.6.el6_0
Fixed · RHSA-2011:0858
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
glassfish-javamail-0:1.4.2-0jpp.ep1.5.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
glassfish-jaxb-0:2.1.4-1.12.patch03.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
glassfish-jsf-0:1.2_13-2.1.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
hibernate3-1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
hibernate3-annotations-0:3.3.1-1.11.GA_CP02.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
hibernate3-entitymanager-0:3.3.2-2.5.GA_CP01.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jacorb-0:2.3.0-1jpp.ep1.9.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jakarta-commons-logging-jboss-0:1.1-9.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-aop-0:1.5.5-3.CP04.2.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-common-0:1.2.1-0jpp.ep1.3.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-messaging-0:1.4.0-3.SP3_CP09.4.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-remoting-0:2.2.3-3.SP1.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-seam-0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jboss-seam2-0:2.0.2.FP-1.ep1.21.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossas-0:4.3.0-6.GA_CP07.4.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossts-1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossweb-0:2.0.0-6.CP12.0jpp.ep1.2.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossws-0:2.0.1-4.SP2_CP07.2.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossws-common-0:1.0.0-2.GA_CP05.1.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jbossws-framework-0:2.0.1-1.GA_CP05.1.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jcommon-0:1.0.16-1.1.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jfreechart-0:1.0.13-2.3.1.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
jgroups-1:2.4.7-1.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
quartz-0:1.5.2-1jpp.patch01.ep1.4.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
rh-eap-docs-0:4.3.0-6.GA_CP07.ep1.3.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
xerces-j2-0:2.7.1-9jpp.4.patch_02.1.ep1.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4
xml-security-0:1.3.0-1.3.patch01.ep1.2.el4
Fixed · RHSA-2009:1636
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
glassfish-jaxb-0:2.1.4-1.12.patch03.1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
glassfish-jsf-0:1.2_13-2.1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
hibernate3-1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
hibernate3-annotations-0:3.3.1-1.11GA_CP02.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
hibernate3-entitymanager-0:3.3.2-2.5.1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jacorb-0:2.3.0-1jpp.ep1.9.1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-aop-0:1.5.5-3.CP04.2.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-common-0:1.2.1-0jpp.ep1.3.el5.1
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-messaging-0:1.4.0-3.SP3_CP09.4.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-remoting-0:2.2.3-3.SP1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-seam-0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jboss-seam2-0:2.0.2.FP-1.ep1.18.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossas-0:4.3.0-6.GA_CP07.4.2.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossts-1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossweb-0:2.0.0-6.CP12.0jpp.ep1.2.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossws-0:2.0.1-4.SP2_CP07.2.1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossws-common-0:1.0.0-2.GA_CP05.1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jbossws-framework-0:2.0.1-1.GA_CP05.1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jcommon-0:1.0.16-1.1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jfreechart-0:1.0.13-2.3.1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
jgroups-1:2.4.7-1.ep1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
quartz-0:1.5.2-1jpp.patch01.ep1.4.1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
rh-eap-docs-0:4.3.0-6.GA_CP07.ep1.3.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5
xml-security-0:1.3.0-1.3.patch01.ep1.2.1.el5
Fixed · RHSA-2009:1649
Red Hat JBoss Operations Network 3.1
n/a
Fixed · RHSA-2012:0725
Red Hat JBoss Portal 5.2
n/a
Fixed · RHSA-2012:1232
Red Hat JBoss Web Framework Kit 2.2
n/a
Fixed · RHSA-2013:0763
Red Hat Network Satellite Server v 5.1
java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4
Fixed · RHSA-2009:1662
Red Hat Network Satellite Server v 5.3
java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5
Fixed · RHSA-2010:0043
Supplementary for Red Hat Enterprise Linux 5
java-1.4.2-ibm-0:1.4.2.13.1-1jpp.1.el5
Fixed · RHSA-2009:1505
Supplementary for Red Hat Enterprise Linux 5
java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el5
Fixed · RHSA-2009:1236
Supplementary for Red Hat Enterprise Linux 5
java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5
Fixed · RHSA-2009:1199
Supplementary for Red Hat Enterprise Linux 5
java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5
Fixed · RHSA-2009:1582
Supplementary for Red Hat Enterprise Linux 5
java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5
Fixed · RHSA-2009:1200
| Product | Package | State | Advisory |
|---|---|---|---|
| Extras for RHEL 3 | java-1.4.2-ibm-0:1.4.2.13.1-1jpp.1.el3 | Fixed | RHSA-2009:1505 |
| Extras for RHEL 4 | java-1.4.2-ibm-0:1.4.2.13.1-1jpp.1.el4 | Fixed | RHSA-2009:1505 |
| Extras for RHEL 4 | java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el4 | Fixed | RHSA-2009:1236 |
| Extras for RHEL 4 | java-1.5.0-sun-0:1.5.0.20-1jpp.1.el4 | Fixed | RHSA-2009:1199 |
| Extras for RHEL 4 | java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el4 | Fixed | RHSA-2009:1582 |
| Extras for RHEL 4 | java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4 | Fixed | RHSA-2009:1200 |
| JBEAP 4.2.0 for RHEL 4 | glassfish-javamail-0:1.4.2-0jpp.ep1.5.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | glassfish-jsf-0:1.2_13-2.1.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | hibernate3-1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | hibernate3-annotations-0:3.3.1-1.11.GA_CP02.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | hibernate3-entitymanager-0:3.3.2-2.5.GA_CP01.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jacorb-0:2.3.0-1jpp.ep1.9.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jakarta-commons-logging-jboss-0:1.1-9.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jboss-aop-0:1.5.5-3.CP04.2.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jboss-common-0:1.2.1-0jpp.ep1.3.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jboss-remoting-0:2.2.3-3.SP1.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jboss-seam-0:1.2.1-1.ep1.22.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jbossas-0:4.2.0-5.GA_CP08.5.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jbossts-1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jbossweb-0:2.0.0-6.CP12.0jpp.ep1.2.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jcommon-0:1.0.16-1.1.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jfreechart-0:1.0.13-2.3.1.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | jgroups-1:2.4.7-1.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | quartz-0:1.5.2-1jpp.patch01.ep1.4.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | rh-eap-docs-0:4.2.0-6.GA_CP08.ep1.3.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | xerces-j2-0:2.7.1-9jpp.4.patch_02.1.ep1.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 4 | xml-security-0:1.3.0-1.3.patch01.ep1.2.el4 | Fixed | RHSA-2009:1637 |
| JBEAP 4.2.0 for RHEL 5 | glassfish-jsf-0:1.2_13-2.1.ep1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | hibernate3-1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | hibernate3-annotations-0:3.3.1-1.11GA_CP02.ep1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | hibernate3-entitymanager-0:3.3.2-2.5.1.ep1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jacorb-0:2.3.0-1jpp.ep1.9.1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jboss-aop-0:1.5.5-3.CP04.2.ep1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jboss-common-0:1.2.1-0jpp.ep1.3.el5.1 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jboss-remoting-0:2.2.3-3.SP1.ep1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jboss-seam-0:1.2.1-1.ep1.14.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jbossas-0:4.2.0-5.GA_CP08.5.2.ep1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jbossts-1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jbossweb-0:2.0.0-6.CP12.0jpp.ep1.2.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jcommon-0:1.0.16-1.1.ep1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jfreechart-0:1.0.13-2.3.1.ep1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | jgroups-1:2.4.7-1.ep1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | quartz-0:1.5.2-1jpp.patch01.ep1.4.1.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | rh-eap-docs-0:4.2.0-6.GA_CP08.ep1.3.el5 | Fixed | RHSA-2009:1650 |
| JBEAP 4.2.0 for RHEL 5 | xml-security-0:1.3.0-1.3.patch01.ep1.2.1.el5 | Fixed | RHSA-2009:1650 |
| RHEL 4 for SAP | java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el4_8 | Fixed | RHSA-2009:1551 |
| RHEL 5 for SAP | java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el5_3 | Fixed | RHSA-2009:1551 |
| RHEV Manager version 3.0 | jasperreports-server-pro-0:4.7.1-2.el6ev | Fixed | RHSA-2012:1537 |
| Red Hat Enterprise Linux 5 | java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5 | Fixed | RHSA-2009:1201 |
| Red Hat Enterprise Linux 5 | xerces-j2-0:2.7.1-7jpp.2.el5_4.2 | Fixed | RHSA-2009:1615 |
| Red Hat Enterprise Linux 6 | xerces-j2-0:2.7.1-12.6.el6_0 | Fixed | RHSA-2011:0858 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | glassfish-javamail-0:1.4.2-0jpp.ep1.5.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | glassfish-jaxb-0:2.1.4-1.12.patch03.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | glassfish-jsf-0:1.2_13-2.1.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | hibernate3-1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | hibernate3-annotations-0:3.3.1-1.11.GA_CP02.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | hibernate3-entitymanager-0:3.3.2-2.5.GA_CP01.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jacorb-0:2.3.0-1jpp.ep1.9.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jakarta-commons-logging-jboss-0:1.1-9.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-aop-0:1.5.5-3.CP04.2.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-common-0:1.2.1-0jpp.ep1.3.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-messaging-0:1.4.0-3.SP3_CP09.4.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-remoting-0:2.2.3-3.SP1.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-seam-0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jboss-seam2-0:2.0.2.FP-1.ep1.21.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossas-0:4.3.0-6.GA_CP07.4.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossts-1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossweb-0:2.0.0-6.CP12.0jpp.ep1.2.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossws-0:2.0.1-4.SP2_CP07.2.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossws-common-0:1.0.0-2.GA_CP05.1.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jbossws-framework-0:2.0.1-1.GA_CP05.1.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jcommon-0:1.0.16-1.1.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jfreechart-0:1.0.13-2.3.1.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | jgroups-1:2.4.7-1.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | quartz-0:1.5.2-1jpp.patch01.ep1.4.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | rh-eap-docs-0:4.3.0-6.GA_CP07.ep1.3.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | xerces-j2-0:2.7.1-9jpp.4.patch_02.1.ep1.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 4 | xml-security-0:1.3.0-1.3.patch01.ep1.2.el4 | Fixed | RHSA-2009:1636 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | glassfish-jaxb-0:2.1.4-1.12.patch03.1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | glassfish-jsf-0:1.2_13-2.1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | hibernate3-1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | hibernate3-annotations-0:3.3.1-1.11GA_CP02.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | hibernate3-entitymanager-0:3.3.2-2.5.1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jacorb-0:2.3.0-1jpp.ep1.9.1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-aop-0:1.5.5-3.CP04.2.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-common-0:1.2.1-0jpp.ep1.3.el5.1 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-messaging-0:1.4.0-3.SP3_CP09.4.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-remoting-0:2.2.3-3.SP1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-seam-0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jboss-seam2-0:2.0.2.FP-1.ep1.18.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossas-0:4.3.0-6.GA_CP07.4.2.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossts-1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossweb-0:2.0.0-6.CP12.0jpp.ep1.2.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossws-0:2.0.1-4.SP2_CP07.2.1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossws-common-0:1.0.0-2.GA_CP05.1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jbossws-framework-0:2.0.1-1.GA_CP05.1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jcommon-0:1.0.16-1.1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jfreechart-0:1.0.13-2.3.1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | jgroups-1:2.4.7-1.ep1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | quartz-0:1.5.2-1jpp.patch01.ep1.4.1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | rh-eap-docs-0:4.3.0-6.GA_CP07.ep1.3.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Enterprise Application Platform 4.3 for RHEL 5 | xml-security-0:1.3.0-1.3.patch01.ep1.2.1.el5 | Fixed | RHSA-2009:1649 |
| Red Hat JBoss Operations Network 3.1 | n/a | Fixed | RHSA-2012:0725 |
| Red Hat JBoss Portal 5.2 | n/a | Fixed | RHSA-2012:1232 |
| Red Hat JBoss Web Framework Kit 2.2 | n/a | Fixed | RHSA-2013:0763 |
| Red Hat Network Satellite Server v 5.1 | java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4 | Fixed | RHSA-2009:1662 |
| Red Hat Network Satellite Server v 5.3 | java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5 | Fixed | RHSA-2010:0043 |
| Supplementary for Red Hat Enterprise Linux 5 | java-1.4.2-ibm-0:1.4.2.13.1-1jpp.1.el5 | Fixed | RHSA-2009:1505 |
| Supplementary for Red Hat Enterprise Linux 5 | java-1.5.0-ibm-1:1.5.0.10-1jpp.4.el5 | Fixed | RHSA-2009:1236 |
| Supplementary for Red Hat Enterprise Linux 5 | java-1.5.0-sun-0:1.5.0.20-1jpp.1.el5 | Fixed | RHSA-2009:1199 |
| Supplementary for Red Hat Enterprise Linux 5 | java-1.6.0-ibm-1:1.6.0.6-1jpp.3.el5 | Fixed | RHSA-2009:1582 |
| Supplementary for Red Hat Enterprise Linux 5 | java-1.6.0-sun-1:1.6.0.15-1jpp.1.el5 | Fixed | RHSA-2009:1200 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
AV:N/AC:L/Au:N/C:N/I:N/A:P
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (21 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 3, 2026 | 30.38% (0.30380) | 98.19th | v5 (v2026.06.15) |
| Jun 15, 2026 | 30.38% (0.30380) | 97.99th | v5 (v2026.06.15) |
| May 26, 2026 | 1.04% (0.01044) | 77.69th | v4 (v2025.03.14) |
| Mar 4, 2026 | 2.06% (0.02059) | 83.64th | v4 (v2025.03.14) |
| Mar 30, 2025 | 0.42% (0.00416) | 58.79th | v4 (v2025.03.14) |
| Mar 29, 2025 | 1.90% (0.01896) | 72.23th | v4 (v2025.03.14) |
| Mar 17, 2025 | 0.32% (0.00315) | 52.38th | v4 (v2025.03.14) |
| Dec 17, 2024 | 7.16% (0.07157) | 93.95th | v3 (v2023.03.01) |
| Jul 13, 2024 | 17.16% (0.17157) | 96.14th | v3 (v2023.03.01) |
| Apr 26, 2024 | 12.88% (0.12884) | 95.42th | v3 (v2023.03.01) |
| Mar 16, 2024 | 7.74% (0.07744) | 94.02th | v3 (v2023.03.01) |
| Feb 4, 2024 | 3.19% (0.03192) | 90.23th | v3 (v2023.03.01) |
| Nov 8, 2023 | 2.28% (0.02276) | 88.42th | v3 (v2023.03.01) |
| Jun 25, 2023 | 2.23% (0.02230) | 87.93th | v3 (v2023.03.01) |
| Mar 30, 2023 | 1.58% (0.01584) | 85.35th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.79% (0.00794) | 78.90th | v3 (v2023.03.01) |
| Mar 6, 2023 | 7.34% (0.07344) | 92.59th | v2 (v2022.01.01) |
| Jul 18, 2022 | 7.34% (0.07344) | 92.17th | v2 (v2022.01.01) |
| Jul 17, 2022 | 4.36% (0.04358) | 87.36th | v2 (v2022.01.01) |
| Apr 1, 2022 | 7.34% (0.07344) | 91.87th | v2 (v2022.01.01) |
| Feb 4, 2022 | 7.34% (0.07344) | 80.64th | v2 (v2022.01.01) |
No CWE recorded.
References (70)
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html vendor-advisoryx_refsource_APPLEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html vendor-advisoryx_refsource_SUSEThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html vendor-advisoryx_refsource_SUSEThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00002.html vendor-advisoryx_refsource_SUSEThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html vendor-advisoryx_refsource_SUSEThird Party Advisory
- http://marc.info/?l=bugtraq&m=125787273209737&w=2 vendor-advisoryx_refsource_HPMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1232.html vendor-advisoryx_refsource_REDHATBroken Link
- http://rhn.redhat.com/errata/RHSA-2012-1537.html vendor-advisoryx_refsource_REDHATBroken Link
- http://secunia.com/advisories/36162 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/36176 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/36180 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/36199 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/37300 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/37460 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/37671 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/37754 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/38231 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/38342 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/43300 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://secunia.com/advisories/50549 third-party-advisoryx_refsource_SECUNIAThird Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.486026 vendor-advisoryx_refsource_SLACKWAREThird Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1 x_refsource_CONFIRMBroken LinkPatch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-263489-1 vendor-advisoryx_refsource_SUNALERTBroken LinkPatchVendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-272209-1 vendor-advisoryx_refsource_SUNALERTBroken Link
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021506.1-1 vendor-advisoryx_refsource_SUNALERTBroken Link
- http://svn.apache.org/viewvc/xerces/java/trunk/src/org/apache/xerces/impl/XMLScanner.java?r1=572055&r2=787352&pathrev=787353&diff_format=h x_refsource_CONFIRMPatchVendor Advisory
- http://www.cert.fi/en/reports/2009/vulnerability2009085.html x_refsource_MISCThird Party Advisory
- http://www.codenomicon.com/labs/xml/ x_refsource_MISCThird Party Advisory
- http://www.debian.org/security/2010/dsa-1984 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:209 vendor-advisoryx_refsource_MANDRIVAThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:108 vendor-advisoryx_refsource_MANDRIVAThird Party Advisory
- http://www.networkworld.com/columnists/2009/080509-xml-flaw.html x_refsource_MISCThird Party Advisory
- http://www.openwall.com/lists/oss-security/2009/09/06/1 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2009/10/22/9 mailing-listx_refsource_MLISTMailing ListPatchThird Party Advisory
- http://www.openwall.com/lists/oss-security/2009/10/23/6 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2009/10/26/3 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html x_refsource_CONFIRMThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2009-096303.html x_refsource_CONFIRMBroken Link
- http://www.redhat.com/support/errata/RHSA-2009-1615.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0858.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://www.securityfocus.com/archive/1/507985/100/0/threaded mailing-listx_refsource_BUGTRAQThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/35958 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1022680 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- http://www.ubuntu.com/usn/USN-890-1 vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- http://www.us-cert.gov/cas/techalerts/TA09-294A.html third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA10-012A.html third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html x_refsource_CONFIRMThird Party Advisory
- http://www.vupen.com/english/advisories/2009/2543 vdb-entryx_refsource_VUPENPermissions Required
- http://www.vupen.com/english/advisories/2009/3316 vdb-entryx_refsource_VUPENPermissions Required
- http://www.vupen.com/english/advisories/2011/0359 vdb-entryx_refsource_VUPENPermissions Required
- https://access.redhat.com/security/cve/CVE-2009-2625 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=512921 x_refsource_CONFIRMIssue TrackingThird Party Advisory
- https://github.com/advisories/GHSA-334p-wv2m-w3vp Advisory
- https://github.com/apache/xerces2-j/commit/0bdf77af1d4fd26ec2e630fb6d12e2dfa77bc12b
- https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E mailing-listx_refsource_MLIST
- https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2009-2625
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8520 vdb-entrysignaturex_refsource_OVALThird Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9356 vdb-entrysignaturex_refsource_OVALThird Party Advisory
- https://rhn.redhat.com/errata/RHSA-2009-1199.html vendor-advisoryx_refsource_REDHATBroken Link
- https://rhn.redhat.com/errata/RHSA-2009-1200.html vendor-advisoryx_refsource_REDHATBroken Link
- https://rhn.redhat.com/errata/RHSA-2009-1201.html vendor-advisoryx_refsource_REDHATBroken Link
- https://rhn.redhat.com/errata/RHSA-2009-1636.html vendor-advisoryx_refsource_REDHATBroken Link
- https://rhn.redhat.com/errata/RHSA-2009-1637.html vendor-advisoryx_refsource_REDHATBroken Link
- https://rhn.redhat.com/errata/RHSA-2009-1649.html vendor-advisoryx_refsource_REDHATBroken Link
- https://rhn.redhat.com/errata/RHSA-2009-1650.html vendor-advisoryx_refsource_REDHATBroken Link
- https://snyk.io/vuln/SNYK-JAVA-XERCES-32014
- https://www.cve.org/CVERecord?id=CVE-2009-2625
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00310.html vendor-advisoryx_refsource_FEDORAMailing ListThird Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00325.html vendor-advisoryx_refsource_FEDORAMailing ListThird Party Advisory
Change history (0)
No recorded changes yet.