SUSE-SU-2016:2154-1: xerces-c&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise

CVSS: UnknownPublished

Published 25-08-2016Last modified 04-02-2026

Vulnerability summary

SUSE-SU-2016:2154-1 is a vulnerability in xerces-c&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2

CVE-2016-2099 CVE-2016-4463

Timeline

25-08-2016
PublishedVulnerability first disclosed.
04-02-2026
Last modifiedVulnerability information updated.

Description

Security update for xerces-c xerces-c was updated to fix one security issue. This security issue was fixed: - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have unspecified impact via an invalid character in an XML document (bsc#979208). - CVE-2016-4463: Apache Xerces-C XML Parser crashed on malformed DTD (bnc#985860).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse4 products

xerces-c&distro=SUSE Linux Enterprise Desktop 12 SP1< 3.1.1-12.3
xerces-c&distro=SUSE Linux Enterprise Server 12 SP1< 3.1.1-12.3
xerces-c&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 3.1.1-12.3
xerces-c&distro=SUSE Linux Enterprise Software Development Kit 12 SP1< 3.1.1-12.3

1 vendor · 4 products

References

5 links